Synthèse
A vulnerability has been discovered in Citrix NetScaler Application Delivery Controller (ADC) and Citrix NetScaler Gateway that could allow for remote code execution. Citrix NetScaler ADC (Application Delivery Controller) is an enterprise networking platform and traffic management device designed to optimize, secure, and accelerate the delivery of web and cloud applications. Successful exploitation of the most severe of these vulnerabilities could allow attackers to gain remote code execution (RCE) on targeted devices or trigger a denial-of-service state that can cause crashes. To be vulnerable, NetScaler ADC and NetScaler Gateway appliances must be configured as a Security Assertion Markup Language (SAML) Identity Provider (IdP) or Service Provider (SP).
A vulnerability has been discovered in Citrix NetScaler Application Delivery Controller (ADC) and Citrix NetScaler Gateway that could allow for remote code execution. Citrix NetScaler ADC (Application Delivery Controller) is an enterprise networking platform and traffic management device designed to optimize, secure, and accelerate the delivery of web and cloud applications. Successful exploitation of the most severe of these vulnerabilities could allow attackers to gain remote code execution (RCE) on targeted devices or trigger a denial-of-service state that can cause crashes. To be vulnerable, NetScaler ADC and NetScaler Gateway appliances must be configured as a Security Assertion Markup Language (SAML) Identity Provider (IdP) or Service Provider (SP).
Source originale
cisecurity.org
CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability ↗
securityaffairs.com · 9 oct.
Citrix warns admins to patch new NetScaler RCE flaw immediately ↗
bleepingcomputer.com · 9 oct.
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments ↗
thehackernews.com · 9 oct.
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability ↗
securityweek.com · 9 oct.
Vulnérabilité dans Citrix NetScaler ADC et Gateway (09 octobre 2026) ↗
cert.ssi.gouv.fr · 9 oct.