SecOraLens
CriticalAPTCVE-2026-107406

Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability

Cyber Security News·Source published ·1 min read

What happened?

Citrix has urged customers to patch a critical security flaw in NetScaler ADC and NetScaler Gateway that could allow remote code execution or cause a denial of service. Tracked as CVE-2026-107406, the memory overflow vulnerability carries a CVSS v4.0 score of 9.5 and affects appliances with specific SAML settings. The security bulletin, CTX697191, was published on October 8, 2026. Citrix said it was not aware of any unmitigated exploits when the bulletin was published. That statement should not be read as proof that every deployment is safe.

Key details

  • Citrix urged patching NetScaler ADC and Gateway for a critical RCE vulnerability.
  • Affected builds 14.1-73.37 through 14.1-73.41 and 13.1-64.23 through 13.1-64.28 when configured as SAML IdP.
  • Fixed versions are 14.1-73.46 or later, and 13.1-64.29 or later.
  • Exposure depends on appliance role as SAML IdP or SP.
  • Citrix credited JPMorgan Chase XOR Team and Maxim Suhanov for discovering the issue.

Affected

  • NetScaler ADC and Gateway builds 14.1-73.37 to 14.1-73.41 as SAML IdP.
  • NetScaler ADC 14.1-FIPS builds 14.1-73.37 to 14.1-73.41 FIPS as SAML IdP.
  • NetScaler ADC 13.1-FIPS and NDcPP builds 13.1-37.279 to 13.1-37.282 as SAML IdP.
  • Older builds before 14.1-73.37 or 13.1-64.23 as SAML SP or IdP.

Fixes and mitigations

  1. Upgrade to NetScaler ADC and Gateway 14.1-73.46 or later.
  2. Install 14.1-73.46 FIPS or later for FIPS appliances.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.

Back to all advisories