[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB8Mw816GR9HZ5d231e0Pp1L9ERbk4uC0VQUf2K-5WIk":3},{"article":4,"iocs":42,"watch_terms":80,"solutions":81,"lesson":175},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"c28186e9-e282-4371-a769-56979800782c","Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass","citrix-patches-12-netscaler-and-secure-access-client-flaws-including-authenticat-96d21d","Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below - CVE-2026-120868 (CVSS score: 9.3) - A memory overflow vulnerability in Packet","Citrix has released patches for twelve critical security vulnerabilities affecting NetScaler ADC, NetScaler Gateway, and NetScaler Console. These flaws could lead to denial-of-service or authentication bypass. Additionally, vulnerabilities in NetScaler Console and Secure Access Client for Windows and Linux have been addressed, with some allowing for privilege escalation.","Citrix patches 12 critical flaws in NetScaler ADC, Gateway, Console, and Secure Access Client.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F11\u002Fcitrix-patches-12-netscaler-and-secure.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjDDv_B4B-cVtvwKyLiGQsL804yGC7_xHF7y3yD5_C284fRXBVRAn5Ashy2apgJr-jaoBHRa3ujgXv1jskM53EvP_pFt41CTazYqFT-tQdcukNBeOTzVIpZXVDsdgtup4MJOEdNNZP9SP0FAdIpG1Cnfgo0YgBXzmI_boLV4qSAsVrmYn5wA3GxnPuj21JO\u002Fs1600\u002Fcitrix.jpg","2026-11-12T15:38:49+00:00","2026-11-12T17:00:25.529227+00:00",8,[17,20,22,24,26],{"name":18,"type":19},"NetScaler ADC","product",{"name":21,"type":19},"NetScaler Gateway",{"name":23,"type":19},"NetScaler Console",{"name":25,"type":19},"Secure Access Client",{"name":27,"type":28},"Citrix","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35,37],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},{"category":38},{"id":39,"icon":31,"name":40,"slug":41},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[43,47,50,53,56,59,62,65,68,71,74,77],{"type":44,"value":45,"context":46},"cve","CVE-2026-120868","Memory overflow vulnerability in Packet Processing",{"type":44,"value":48,"context":49},"CVE-2026-107407","Memory overflow vulnerability in SMPP traffic",{"type":44,"value":51,"context":52},"CVE-2026-107408","Memory corruption vulnerability in DNS \u002F DNS-over-HTTPS (DoH)",{"type":44,"value":54,"context":55},"CVE-2026-107409","Memory corruption vulnerability in DNS-over-HTTPS (DoH)",{"type":44,"value":57,"context":58},"CVE-2026-107410","Memory overflow in NetScaler Push",{"type":44,"value":60,"context":61},"CVE-2026-107412","Multiple memory overflow vulnerabilities",{"type":44,"value":63,"context":64},"CVE-2026-107415","Memory overflow vulnerability in Email OTP authentication",{"type":44,"value":66,"context":67},"CVE-2026-111344","Memory overflow vulnerability in Endpoint Analysis (EPA\u002FEPAS)",{"type":44,"value":69,"context":70},"CVE-2026-120864","Memory overflow vulnerability in ICA proxy",{"type":44,"value":72,"context":73},"CVE-2026-120869","Improper authentication vulnerability in NetScaler Console",{"type":44,"value":75,"context":76},"CVE-2026-118268","Improper privilege management vulnerability in Secure Access Client for Windows",{"type":44,"value":78,"context":79},"CVE-2026-118269","Improper privilege management vulnerability in Secure Access Client for Linux",[27,18,21],{"controls":82,"vendors":169},[83,112,141],{"slug":84,"name":85,"problem":86,"products":87},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":113,"name":114,"problem":115,"products":116},"patch-management","Automated patch management","Known holes get closed in days, not months.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":41,"name":142,"problem":143,"products":144},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[145,153,161],{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":154,"vendor_name":155,"vendor_logo":156,"product_slug":157,"product_name":158,"url":159,"description":160},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":162,"vendor_name":163,"vendor_logo":164,"product_slug":165,"product_name":166,"url":167,"description":168},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",[170],{"slug":171,"name":27,"logo_path":172,"roles":173},"citrix","\u002Fvendor-logos\u002Fcitrix.png",[174],"affected",{"slug":176,"title":177,"body":178,"framework_refs":179,"framework_notes":185},"citrix-patches-critical-authentication-bypass-and-privilege-escalation-flaws-in-netscaler-products","Citrix Patches Critical Authentication Bypass and Privilege Escalation Flaws in NetScaler Products","Citrix disclosed twelve security vulnerabilities across NetScaler ADC, NetScaler Gateway, and NetScaler Console, including critical flaws enabling authentication bypass, denial-of-service, and privilege escalation. These products are widely deployed as internet-facing network access and application delivery infrastructure, making unpatched systems high-value targets for threat actors. Authentication bypass vulnerabilities are particularly dangerous because they can allow attackers to gain unauthorized access without valid credentials, potentially exposing internal networks. The incident underscores that organizations running perimeter security products must treat vendor-issued patches with the highest urgency, as exploitation of these components can serve as an initial foothold into the broader environment.",[180,181,182,183,184],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 2: Inventory and Control of Software Assets (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIS2 Article 21(2)(e)","NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks",{"NIS2 Article 21(2)(e)":186,"NIST SP 800-53 SI-2: Flaw Remediation":187,"CIS Control 7: Continuous Vulnerability Management (v8)":188,"CIS Control 2: Inventory and Control of Software Assets (v8)":189,"NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks":190},"This point covers security in acquisition, development and maintenance including vulnerability handling; organizations using NetScaler products are required to have processes that ensure timely application of vendor-issued patches for disclosed vulnerabilities.","SI-2 requires organizations to identify, report, and correct information system flaws within defined timeframes; the twelve NetScaler vulnerabilities represent exactly the class of flaws this control mandates be remediated in a timely, tracked manner.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities; applying Citrix's patches promptly for these twelve flaws is exactly the prioritized remediation process this control mandates for internet-facing systems.","Knowing which versions of NetScaler ADC, Gateway, Console, and Secure Access Client are deployed is a prerequisite to assessing exposure; this control requires maintaining an accurate software inventory that would enable rapid identification of vulnerable instances.","The authentication bypass and privilege escalation flaws in NetScaler products require an active mitigation response; this category directly calls for organizations to act on newly disclosed vulnerabilities rather than leaving internet-facing systems exposed."]