NetScaler builds that fixed zero-days carry critical flaw, too

Key points

• Citrix has disclosed CVE-2026-107406, a critical memory overflow in NetScaler ADC and Gateway builds that patched last month’s exploited flaws, scoring 9.5 on CVSS v4.0.
• Appliances configured for SAML single sign-on as an identity provider, service provider, or both, depending on build, are exposed to remote code execution or denial of service, with no workaround listed.
• It marks the third NetScaler security bulletin in under a fortnight and the fourth SAML-related flaw in NetScaler since March.