[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhOiAJ1tDHJvyassBPDGJ_CltyL95J2zNg1E3Tqxfh9g":3},{"article":4,"iocs":41,"watch_terms":46,"solutions":47,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"65e6a15f-abbc-49d0-a282-f129edf71da9","Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments","citrix-patches-critical-netscaler-flaw-that-could-enable-rce-in-saml-deployments-282fb7","Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. \"CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration conditions,\" Citrix said. The vulnerability","Citrix has released patches for a critical security vulnerability (CVE-2026-107406) in NetScaler ADC and NetScaler Gateway that could lead to remote code execution or denial-of-service. The flaw, with a CVSS score of 9.5, affects specific versions when configured as a SAML identity provider or service provider. While there's no evidence of active exploitation, successful exploitation requires specific SAML configurations.","Citrix patches critical NetScaler flaw enabling RCE in SAML deployments.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fcitrix-patches-critical-netscaler-flaw.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEifRR7IQ4Ngqm8ANJ-DKwW60qeemJlrfrtvhaAwtpzW37_jAkbdctxJEqjw8k_m1KT32ryqoxa1dNYoEPG-E9xNwrbtXqbOjbzmgs3JM9RW68FZMNA8ky14QKTLpEfHop9A4xmXO46fxQaeXZMZzzMQ-qoIXLpMrr8Gbekn3cgNX5xc7bYvMRDYKjDeLf4o\u002Fs1600\u002Fcit.jpg","2026-10-09T08:11:33+00:00","2026-10-09T10:00:24.653258+00:00",8,[17,20,22,25],{"name":18,"type":19},"NetScaler ADC","product",{"name":21,"type":19},"NetScaler Gateway",{"name":23,"type":24},"Citrix","vendor",{"name":26,"type":27},"SAML","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,36],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},{"category":37},{"id":38,"icon":30,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":43,"value":44,"context":45},"cve","CVE-2026-107406","Critical memory overflow vulnerability in NetScaler ADC and Gateway.",[23,18,21],{"controls":48,"vendors":129},[49,78,107],{"slug":50,"name":51,"problem":52,"products":53},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":79,"name":80,"problem":81,"products":82},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":108,"name":109,"problem":110,"products":111},"patch-management","Automated patch management","Known holes get closed in days, not months.",[112,116,124],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":108,"product_name":113,"url":114,"description":115},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":125,"product_name":126,"url":127,"description":128},"intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",[130],{"slug":131,"name":23,"logo_path":132,"roles":133},"citrix","\u002Fvendor-logos\u002Fcitrix.png",[134],"affected",{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":151},"critical-citrix-netscaler-rce-flaw-demands-immediate-patching-in-saml-deployments","Critical Citrix NetScaler RCE Flaw Demands Immediate Patching in SAML Deployments","A critical vulnerability (CVE-2026-107406) in Citrix NetScaler ADC and NetScaler Gateway, scoring 9.5 on the CVSS scale, exposes organizations to remote code execution and denial-of-service attacks when systems are configured as SAML identity or service providers. The root issue lies in unpatched network appliances serving as authentication gateways — a high-value target because compromising them can grant attackers broad access to downstream systems and user identities. Although active exploitation has not yet been observed, the severity and the prevalence of SAML-based SSO deployments in enterprise environments make this a high-priority risk. This incident underscores how specific configuration choices (SAML IdP\u002FSP roles) can dramatically expand the attack surface of otherwise standard infrastructure components.",[140,141,142,143,144,145,146,147,148,149,150],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 4: Secure Configuration of Enterprise Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST CM-6: Configuration Settings","NIST SC-7: Boundary Protection (Network Segmentation)","NIST IA-8: Identification and Authentication (SAML\u002FFederated Identity)","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities","ITIL 4: Change Enablement (emergency change procedures)","GDPR Article 32: Security of Processing (obligation to apply appropriate technical measures)",{}]