Citrix Patches 12 Critical NetScaler and Secure Access Client Flaws Including Authentication Bypass and Multiple DoS Issues
Citrix has released security updates addressing 12 vulnerabilities across NetScaler ADC, NetScaler Gateway, NetScaler Console, and Secure Access Client products. Nine of the flaws affect NetScaler ADC and Gateway deployments and carry CVSS scores of 9.3 or higher, primarily involving memory overflow and corruption issues that can result in denial-of-service conditions or unpredictable system behavior. One vulnerability in NetScaler Console allows unauthenticated attackers to bypass authentication controls entirely. Two additional privilege escalation flaws impact the Secure Access Client on Windows and Linux platforms. All issues have been resolved in specific updated releases, and Citrix reports no known exploitation in the wild at the time of disclosure. The company attributed the discoveries to an expanded use of AI-assisted code analysis during its internal review process.
The Hacker NewsNov 12, 2026Translated from English