poslední zpráva · zachyceno
SPOJENO AI
2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway
On 12 November 2026, the Cloud Software Group published security bulletins for its Citrix products addressing 28 memory flaws in Citrix NetScaler ADC and Citrix NetScaler Gateway. One of these vulnerabilities, CVE-2026-120868, affects every deployment, including those using the default configuration. The vendor bulletin describes the impact as unpredictable behaviour and denial of service. Citrix reports no exploitation, and no public proof-of-concept has been confirmed. CERT-EU strongly…
Citrix Cloud Software Group NetScaler FI IT EU CA NL
CVE v události 25
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-107407 | – | – | – |
| CVE-2026-107408 | – | – | – |
| CVE-2026-107409 | – | – | – |
| CVE-2026-107410 | – | – | – |
| CVE-2026-107411 | – | – | – |
| CVE-2026-107412 | – | – | – |
| CVE-2026-107413 | – | – | – |
| CVE-2026-107414 | – | – | – |
| CVE-2026-107415 | – | – | – |
| CVE-2026-111340 | – | – | – |
| CVE-2026-111341 | – | – | – |
| CVE-2026-111342 | – | – | – |
| CVE-2026-118268 | – | – | – |
| CVE-2026-118269 | – | – | – |
| CVE-2026-120860 | – | – | – |
| CVE-2026-120861 | – | – | – |
| CVE-2026-120862 | – | – | – |
| CVE-2026-120863 | – | – | – |
| CVE-2026-120864 | – | – | – |
| CVE-2026-120865 | – | – | – |
| CVE-2026-120866 | – | – | – |
| CVE-2026-120867 | – | – | – |
| CVE-2026-120868 | – | – | – |
| CVE-2026-120869 | 9.3 4.0 · NetScaler | – | – |
| CVE-2026-122990 | – | – | – |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.5.
Jak se o tom psalo 5
-
· zachyceno · NCSC-FI FI
Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin 2026-11-12
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.5, CVEs: CVE-2026-120868, CVE-2026-107407, CVE-2026-107408, CVE-2026-107409, CVE-2026-107410, CVE-2026-107411, CVE-2026-107412, CVE-2026-107413, CVE-2026-107414, CVE-2026-107415, CVE-2026-111340, CVE-2026-111341, CVE-2026-111342, CVE-2026-111343, CVE-2026-111344, CVE-2026-111345, CVE-2026-111346, CVE-2026-111347, CVE-2026-111348, CVE-2026-111349 (+8 other associated CVEs), Summary: Multiple critical…
-
· CSIRT Itálie (ACN) IT
Rilevate vulnerabilità in prodotti Citrix
Citrix ha rilasciato aggiornamenti di sicurezza per risolvere molteplici vulnerabilità, di cui 10 con gravità "critica" e 15 con gravità "alta", presenti nei prodotti NetScaler ADC, NetScaler Gateway, NetScaler Console, Secure Access Client e App Layering.
-
· CERT-EU EU nadpis události
2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway
On 12 November 2026, the Cloud Software Group published security bulletins for its Citrix products addressing 28 memory flaws in Citrix NetScaler ADC and Citrix NetScaler Gateway. One of these vulnerabilities, CVE-2026-120868, affects every deployment, including those using the default configuration. The vendor bulletin describes the impact as unpredictable behaviour and denial of service. Citrix reports no exploitation, and no public proof-of-concept has been confirmed. CERT-EU strongly…
-
· Cyber Centre Kanada CA
Citrix security advisory (AV26-1150)
Serial number: AV26-1150 Date: November 12, 2026 As of November 12, 2026, Citrix is affected by vulnerabilities in the following products: NetScaler ADC and NetScaler Gateway Prior to 13.1-64.39 Prior to 14.1-73.57 NetScaler ADC FIPS Prior to 14.1-73.58 FIPS Prior to 13.1-37.293 FIPS & NDcPP NetScaler Console Prior to 14.1-74.34 Secure Access Client for Linux Prior to 26.10.4 Secure Access Client for Windows Prior to 26.11.16 The Cyber Centre encourages users and administrators to review the…
-
· NCSC-NL NL
NCSC-2026-0491 [1.00] [M/H] Meerdere kwetsbaarheden verholpen in Citrix Secure Access Client, NetScaler ADC, NetScaler Gateway en NetScaler Console.
Citrix heeft meerdere kwetsbaarheden verholpen in Citrix Secure Access Client, NetScaler ADC, NetScaler Gateway en NetScaler Console. Citrix heeft meerdere kwetsbaarheden verholpen in Citrix Secure Access Client for Windows, NetScaler ADC, NetScaler Gateway en NetScaler Console. De kwetsbaarheden hebben CVSS v4.0-scores variërend van 6.9 tot 9.5 en omvatten onder andere geheugenbeschadiging (Memory Corruption), authenticatieomzeiling (Improper Authentication) en privilege-escalatie (Improper…