Our takeCitrix released patches for CVE-2026-107406, a memory overflow in NetScaler ADC and Gateway that can lead to RCE or DoS in certain SAML configs. Update if you run these appliances.Cyber Resilience desk
Sources (3)
- securityweek · securityweek
- hackernews · hackernews
- acsm_au · acsm_au
What this means for you — Security leader:Apply the Citrix patch for CVE-2026-107406 immediately on all NetScaler ADC and Gateway instances, especially those using SAML.
What this means for you — Lean IT orgs:If you run Citrix NetScaler ADC or Gateway, install the update right away. Most smaller teams without these appliances can ignore this one.
What this means for you — MSP:Patch all client NetScaler ADC and Gateway deployments for CVE-2026-107406 as soon as possible, prioritizing SAML configurations.
What this means for you — Researcher:Citrix released patches for CVE-2026-107406, a memory overflow that can lead to RCE or DoS under specific SAML conditions.