[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKMH8aLSMLkzQ18_fVBaUxdVpeigImcM9IRtfxjosGqg":3},{"article":4,"iocs":45,"watch_terms":72,"solutions":73,"lesson":167},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"cae6a962-8d8e-4191-86b5-c00f1903f3a7","Citrix Patches 10 Critical NetScaler Vulnerabilities","citrix-patches-10-critical-netscaler-vulnerabilities-7fc84e","Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions. The post Citrix Patches 10 Critical NetScaler Vulnerabilities appeared first on SecurityWeek.","Citrix has released patches for 28 vulnerabilities affecting NetScaler ADC and NetScaler Gateway, with nine of these rated as critical. The critical flaws are due to memory overflow issues in various components and could lead to denial-of-service conditions. Additionally, a critical vulnerability in NetScaler Console, tracked as CVE-2026-120869 with a CVSS score of 9.4, allows unauthenticated attackers to bypass controls and access restricted resources. While no exploitation in the wild has been reported, Citrix urges customers to update their instances promptly.","Citrix patches 28 NetScaler vulnerabilities, including 9 critical flaws.","https:\u002F\u002Fwww.securityweek.com\u002Fcitrix-patches-10-critical-netscaler-vulnerabilities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F08\u002FCitrix-vulnerability.jpeg","2026-11-13T09:36:56+00:00","2026-11-13T10:00:32.240593+00:00",8,[17,20,22,24],{"name":18,"type":19},"NetScaler ADC","product",{"name":21,"type":19},"NetScaler Gateway",{"name":23,"type":19},"NetScaler Console",{"name":25,"type":26},"Citrix","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":29,"name":30,"slug":31},null,"Vulnerabilities","vulnerabilities",[33,38,40],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":39},{"id":27,"icon":29,"name":30,"slug":31},{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[46,50,52,54,56,58,60,62,64,66,69],{"type":47,"value":48,"context":49},"cve","CVE-2026-120868","Critical NetScaler vulnerability",{"type":47,"value":51,"context":49},"CVE-2026-107407",{"type":47,"value":53,"context":49},"CVE-2026-107408",{"type":47,"value":55,"context":49},"CVE-2026-107409",{"type":47,"value":57,"context":49},"CVE-2026-107410",{"type":47,"value":59,"context":49},"CVE-2026-107412",{"type":47,"value":61,"context":49},"CVE-2026-107415",{"type":47,"value":63,"context":49},"CVE-2026-111334",{"type":47,"value":65,"context":49},"CVE-2026-120864",{"type":47,"value":67,"context":68},"CVE-2026-111338","Medium-severity NetScaler vulnerability exposing sensitive authentication material",{"type":47,"value":70,"context":71},"CVE-2026-120869","Critical NetScaler Console vulnerability allowing unauthenticated access",[25,18,21],{"controls":74,"vendors":161},[75,104,133],{"slug":76,"name":77,"problem":78,"products":79},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[80,88,96],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":105,"name":106,"problem":107,"products":108},"patch-management","Automated patch management","Known holes get closed in days, not months.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":44,"name":134,"problem":135,"products":136},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[137,145,153],{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":154,"vendor_name":155,"vendor_logo":156,"product_slug":157,"product_name":158,"url":159,"description":160},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",[162],{"slug":163,"name":25,"logo_path":164,"roles":165},"citrix","\u002Fvendor-logos\u002Fcitrix.png",[166],"affected",{"slug":168,"title":169,"body":170,"framework_refs":171,"framework_notes":177},"critical-citrix-netscaler-flaws-demand-immediate-patching-1794565253454","Critical Citrix NetScaler Flaws Demand Immediate Patching","Citrix disclosed 28 vulnerabilities in NetScaler ADC, NetScaler Gateway, and NetScaler Console, including ten critical flaws stemming from memory overflow issues and an authentication bypass (CVE-2026-120869, CVSS 9.4) that allows unauthenticated attackers to access restricted resources. NetScaler products are widely deployed as internet-facing network gateways, making them high-value targets where unpatched flaws can expose entire internal networks. The authentication bypass is particularly dangerous because it requires no credentials, lowering the bar for attackers significantly. Although no active exploitation has been confirmed yet, historically Citrix vulnerabilities are weaponized rapidly once patches are published and reverse-engineered. Organizations must treat this as a time-critical patching event rather than a routine maintenance cycle.",[172,173,174,175,176],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 2: Inventory and Control of Software Assets (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":178,"NIST SP 800-53 SI-2: Flaw Remediation":179,"CIS Control 7: Continuous Vulnerability Management (v8)":180,"CIS Control 2: Inventory and Control of Software Assets (v8)":181,"NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks":182},"NIS2 Article 21(2)(e) mandates security in acquisition, development, and maintenance including vulnerability handling, requiring operators of essential services to have processes for rapidly addressing critical disclosed vulnerabilities in components like NetScaler.","SI-2 requires organizations to identify, report, and correct information system flaws in a timely manner, directly addressing the need to apply Citrix's critical patches promptly.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities, which would have ensured these critical NetScaler flaws were prioritized and patched before exploitation could occur.","Knowing exactly which NetScaler versions are deployed across the environment is a prerequisite for rapid patching; CIS Control 2 demands maintaining an accurate software inventory to enable this.","This category requires that once vulnerabilities like these critical NetScaler flaws are disclosed, organizations take immediate mitigation action or formally accept and document the residual risk."]