CVE-2026-107406Vulnerability

1. “Citrix has since disclosed another critical vulnerability affecting NetScaler ADC and NetScaler Gateway, CVE-2026-107406, which can lead to RCE or denial of service.”

   Zscaler ThreatLabzVendor16 Oct 2026
   CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability

2. “CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability”

   Security AffairsNews11 Oct 2026
   Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION

3. “Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-107406”

   Canadian Centre for Cyber SecurityGovernment9 Oct 2026
   Citrix security advisory (AV26-1023)

4. “CVE-2026-107406 affects NetScaler ADC and NetScaler Gateway and can lead to remote code execution (RCE) or denial of service (DoS).”

   The Register (security)News9 Oct 2026
   Citrix gives NetScaler admins another critical reason to patch

5. “CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability”

   Security AffairsNews9 Oct 2026
   CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability

6. “"CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration conditions," Citrix said.”

   The Hacker NewsNews9 Oct 2026
   Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

7. “CVE-2026-107406: vulnerabilidad de desbordamiento de memoria en NetScaler ADC y NetScaler Gateway cuando están configurados para utilizar SAML.”

   INCIBE-CERTGovernment9 Oct 2026
   Desbordamiento de memoria en NetScaler ADC y NetScaler Gateway de Citrix

8. “Tracked as CVE-2026-107406 (CVSS score of 9.5), the flaw is described as a memory overflow that could lead to remote code execution (RCE) or denial-of-service (DoS).”

   SecurityWeekNews9 Oct 2026
   Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

9. “Référence CVE CVE-2026-107406”

   CERT-FRGovernment9 Oct 2026
   Vulnérabilité dans Citrix NetScaler ADC et Gateway (09 octobre 2026)

• doauthentication[.]doin 1 report
• hunt[.]ioin 1 report
• httpd[.]pidin 1 report
• hxxps://support.citrix[.]com/support-home/kbsearch/article?articleNumber=CTX697191&articleURL=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_107406in 1 report
• activity[.]toin 1 report
• enablement[.]searchin 1 report
• logs[.]searchin 1 report
• syntax[.]reviewin 1 report
• executed[.]atin 1 report
• hxxp://209.141.43[.]95/files/kw2-freebsd-x64-s11;chmod$in 1 report
• 209.141.43[.]95in 1 report

Also named with it: CVE-2026-88771, CVE-2026-88772, CVE-2026-88779, CVE-2026-75650, CVE-2026-96940, CVE-2026-21589