NetScaler Releases Fixes for Critical CVE-2026-107406 in ADC and Gateway
A critical vulnerability in NetScaler ADC and NetScaler Gateway SAML configurations could allow remote code execution or denial of service. Fixed versions are now available.
Tag NetScaler
Updated: Citrix Adds Temporary Mitigation for Actively Exploited NetScaler Vulnerability
Citrix has also published a temporary mitigation for the actively exploited CVE-2026-88779 vulnerability. Fixed versions for affected NetScaler ADC and Gateway deployments remain available.
Citrix Confirms Active Exploitation of Critical NetScaler Vulnerabilities
Citrix warned of active exploitation of two critical vulnerabilities in customer-managed NetScaler ADC and NetScaler Gateway devices. Both flaws have a CVSS v4 score of 9.5.
Previdian Detects Attempts to Exploit NetScaler
Previdian sensors detected requests matching a publicly available proof-of-concept (PoC) for CVE-2026-19490 in NetScaler. Successful compromises have not been confirmed so far.
CISA Adds NetScaler ADC and Gateway Flaw to Actively Exploited List
CISA added CVE-2026-8452 in NetScaler ADC and NetScaler Gateway to its Known Exploited Vulnerabilities catalog. U.S. federal civilian agencies must update the devices by August 29, 2026.