Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-09 08:11 UTC
  • Importiert: 2026-10-15 08:09 UTC
  • CVSS: 9.5
  • Quelle-ID: thn_global
  • uid_hash: e316c5f1cc1d5c4ded94b9a6b113908e69ce00f6d45d5054451d4ffefd50053b

Inhalt

Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions.

"CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration conditions," Citrix said.

The vulnerability

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-107406

CRITICAL

9.5

CRITICAL

9.5

2026-10-08

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews