--- title: Citrix gives NetScaler admins another critical reason to... description: Citrix is urging NetScaler ADC and NetScaler Gateway admins to patch a new critical vulnerability, CVE-2026-107406, which carries a CVSS v4.0 score of 9.5 and... canonical: https://daily.dev/posts/citrix-gives-netscaler-admins-another-critical-reason-to-patch-gnc8jpggi twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Citrix gives NetScaler admins another critical reason to patch | daily.dev og:description: Citrix is urging NetScaler ADC and NetScaler Gateway admins to patch a new critical vulnerability, CVE-2026-107406, which carries a CVSS v4.0 score of 9.5 and... og:url: https://daily.dev/posts/citrix-gives-netscaler-admins-another-critical-reason-to-patch-gnc8jpggi og:image: https://api.daily.dev/og/posts/Gnc8JPggI.png og:image:alt: Citrix gives NetScaler admins another critical reason to patch og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Citrix gives NetScaler admins another critical reason to patch **[The Register](https://daily.dev/sources/theregister)** · 2 min read · 0 upvotes · 0 comments ## Summary Citrix is urging NetScaler ADC and NetScaler Gateway admins to patch a new critical vulnerability, CVE-2026-107406, which carries a CVSS v4.0 score of 9.5 and can lead to remote code execution or denial of service. The flaw stems from a memory buffer restriction issue (CWE-119) and affects SAML service provider or identity provider configurations, depending on the software version. Citrix has not confirmed whether the flaw was exploited as a zero-day before disclosure, though it credits researchers from JPMorgan Chase's XOR Team and an independent researcher for finding it. This comes weeks after another exploited NetScaler flaw (CVE-2026-88772) was used in attacks against government, finance, legal, and education organizations, and shortly after a separate exploited flaw, CVE-2026-88779, was disclosed with an 8.7 severity score. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is CVE-2026-107406 and which Citrix NetScaler products does it affect? CVE-2026-107406 is a critical memory buffer vulnerability (CWE-119) affecting Citrix NetScaler ADC and NetScaler Gateway, carrying a CVSS v4.0 score of 9.5. It can lead to remote code execution or denial of service. Older builds are vulnerable when configured as a SAML service provider or identity provider, while some newer builds are only affected in the identity provider configuration. Secure Private Access Hybrid deployments using NetScaler also require patching. _Admins tracking Citrix NetScaler advisories can follow emerging CVEs like this on daily.dev._ ### Has CVE-2026-107406 in Citrix NetScaler been exploited in the wild? Citrix has not identified CVE-2026-107406 as exploited, unlike two other recent NetScaler flaws. CVE-2026-88772 was exploited since early September in a custom malware campaign targeting government, finance, legal, and education organizations across North America and Europe, and CVE-2026-88779, disclosed with an 8.7 severity score, was also confirmed exploited. _Security teams weighing exploitation risk on patch rollouts can track Citrix advisories via daily.dev._ ## Similar posts on daily.dev - [Citrix NetScaler bug may be multiple flaws in one](https://daily.dev/posts/citrix-netscaler-bug-may-be-multiple-flaws-in-one-kggs3gauu) · The Register · 0 upvotes · 0 comments - [Critical Citrix NetScaler Flaw Draws CitrixBleed Comparisons as Exploitation Window Narrows](https://daily.dev/posts/critical-citrix-netscaler-flaw-draws-citrixbleed-comparisons-as-exploitation-window-narrows-iikwjwkhl) · IT Security Guru · 0 upvotes · 0 comments - [CVE‑2026‑3055](https://daily.dev/posts/cve-2026-3055-agwr1jxtq) · Arctic Wolf · 0 upvotes · 0 comments - [CitrixBleed-ing Again? NetScaler Vulnerability Under Attack](https://daily.dev/posts/citrixbleed-ing-again-netscaler-vulnerability-under-attack-eta7e1qfc) · Dark Reading · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/citrix-gives-netscaler-admins-another-critical-reason-to-patch-gnc8jpggi) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Citrix gives NetScaler admins another critical reason to patch","url":"https://daily.dev/posts/citrix-gives-netscaler-admins-another-critical-reason-to-patch-gnc8jpggi","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/citrix-gives-netscaler-admins-another-critical-reason-to-patch-gnc8jpggi"},"datePublished":"2026-10-09T11:44:45.131Z","dateModified":"2026-10-09T17:52:16.139Z","description":"Citrix is urging NetScaler ADC and NetScaler Gateway admins to patch a new critical vulnerability, CVE-2026-107406, which carries a CVSS v4.0 score of 9.5 and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5c35e712385daa796d5e472793a11efd?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5c35e712385daa796d5e472793a11efd?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/citrix-gives-netscaler-admins-another-critical-reason-to-patch-gnc8jpggi","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"Citrix gives NetScaler admins another critical reason to patch"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/citrix-gives-netscaler-admins-another-critical-reason-to-patch-gnc8jpggi#faq","mainEntity":[{"@type":"Question","name":"What is CVE-2026-107406 and which Citrix NetScaler products does it affect?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-107406 is a critical memory buffer vulnerability (CWE-119) affecting Citrix NetScaler ADC and NetScaler Gateway, carrying a CVSS v4.0 score of 9.5. It can lead to remote code execution or denial of service. Older builds are vulnerable when configured as a SAML service provider or identity provider, while some newer builds are only affected in the identity provider configuration. Secure Private Access Hybrid deployments using NetScaler also require patching. Admins tracking Citrix NetScaler advisories can follow emerging CVEs like this on daily.dev."}},{"@type":"Question","name":"Has CVE-2026-107406 in Citrix NetScaler been exploited in the wild?","acceptedAnswer":{"@type":"Answer","text":"Citrix has not identified CVE-2026-107406 as exploited, unlike two other recent NetScaler flaws. CVE-2026-88772 was exploited since early September in a custom malware campaign targeting government, finance, legal, and education organizations across North America and Europe, and CVE-2026-88779, disclosed with an 8.7 severity score, was also confirmed exploited. Security teams weighing exploitation risk on patch rollouts can track Citrix advisories via daily.dev."}}]} ```