Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

Ravie LakshmananNov 12, 2026Vulnerability / Network Security

Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass.

The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below –

• CVE-2026-120868 (CVSS score: 9.3) – A memory overflow vulnerability in Packet Processing can lead to unpredictable or erroneous behavior or DoS. (All NetScaler ADC and NetScaler Gateway deployments)
• CVE-2026-107407 (CVSS score: 9.3) – A memory overflow vulnerability in SMPP traffic can lead to unpredictable or erroneous behavior or DoS. (NetScaler ADC configured with a Load Balancing or Content Switching virtual server of type SMPP)
• CVE-2026-107408 (CVSS score: 9.3) – A memory corruption vulnerability in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or DoS. (NetScaler ADC…