By Dirk Knop
Publication Date: 2026-10-09 07:21:00
Admins with Citrix Netscalers in their network topology have a busy week. After the manufacturer already released an update last weekend to close a zero-day vulnerability being exploited in the wild, it is now pushing out further updated versions. They patch another critical security flaw that shows similarities to the vulnerability previously fixed.
Citrix has released a security advisory and urges admins to install the updated Netscaler versions as soon as possible. It is a memory overflow that can lead to the execution of injected malicious code or a denial of service, discusses Citrix in a blog post with more information (CVE-2026-107406, CVSS4 9.5, Risk “critical”). Again, devices with SAML functions enabled are vulnerable. This was also the case with the vulnerabilities closed last weekend; the blog post also refers to the vulnerability addressed there, CVE-2026-88779 (CVSS4 8.7, Risk “high”). For versions 14.1-73.37 or 13.1-64.23 and…