By Editorial Team
Publication Date: 2026-10-11 23:50:00
The Australian Cyber Security Centre (ACSC) has issued an updated critical alert warning Australian organisations running Citrix NetScaler ADC and Citrix NetScaler Gateway to apply the latest vendor patches after a newly disclosed vulnerability was found to affect some SAML deployments.
In an update dated 9 October 2026, the ACSC said a further critical vulnerability, tracked as CVE-2026-107406, affects NetScaler ADC and NetScaler Gateway systems configured as a SAML service provider (SP) or identity provider (IdP). The agency described the issue as a memory overflow that could lead to remote code execution and/or denial of service, and said earlier patches for previously listed vulnerabilities do not address the latest flaw.
The ACSC advised organisations to review Citrix’s security advisory and apply updated patches.
The 9 October update follows earlier ACSC updates on 3 October and 30 September relating to…
