Attributed metadata history
Up to 100 retained publisher events per page for 5160964b6fd96efdee1664333ecc0f4b2b95c44343022e7b7714cf42aa231b42. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_cdcffed32aa78fd61f
observed · 2026-10-12 15:25:04 UTC
For the third week running, Citrix has issued a critical security warning to customers managing their own NetScaler ADC and Netscaler Gateway instances, this time warning of a memory overflow vulnerability enabling denial of service or remote code execution. This week’s vulnerability affects ADC and Gateway when configured as a SAML (Security Assertion Markup Language) identity provider (IdP); older versions are also vulnerable when configured as a SAML service provider (SP), Citrix said in an advisory about the vulnerability, which it is tracking as CVE-2026-107406. Citrix rated the vulnerability critical, with a CVSS v4.0 score of 9.5. It said it was “not aware of any unmitigated exploits of this vulnerability.” Nevertheless, it encouraged affected customers to upgrade to patched versions as soon as possible: 13.1-64.29 or later for the 13.1 series, and 14.1-73.46 or later for the 14.1 series of ADC and Gateway, and 13.1.37.283 or later for ADC 13.1-FIPS. Or 13.1-NDcPP. Citrix’s recent run of bad news began on Sept. 27, a Sunday, when it advised users of NetScaler ADC and Gateway to take their systems offline and patch two critical unauthenticated remote cod
Fingerprint: e7be5a42f7029d4afdcdc859f27438e9e4feb59096a1e80947e235db857bcfb2
intelligence_src_cdcffed32aa78fd61f
observed · 2026-10-12 15:25:03 UTC
available
Fingerprint: 7058adebc821bb9d551a9ff0b80ac7c4e28d07e4464aca030b831463a16c18c5