CVE-2026-107406
Published Oct 8, 2026
Last updated 3 days ago
AI description
CVE-2026-107406 is a memory overflow vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway appliances, specifically within their SAML authentication handling. Disclosed by Citrix in October 2026, the flaw impacts customer-managed deployments configured as either a SAML Service Provider (SP) or a SAML Identity Provider (IdP). An unauthenticated remote attacker can exploit this vulnerability by sending crafted SAML traffic to the appliance. This can corrupt the process memory, potentially leading to remote code execution or a denial-of-service condition. The vulnerability affects specific versions of NetScaler ADC and NetScaler Gateway across the 14.1 and 13.1 release tracks, including FIPS editions, as well as Secure Private Access Hybrid deployments. Citrix-managed cloud services are unaffected. To remediate the issue, Citrix has released updated software builds and advised administrators to upgrade their systems. At the time of the initial security bulletin, there were no reports of the vulnerability being actively exploited in the wild.
- Description
- Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: * For the following versions: Applicable only when configured as a SAML IdP: * NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive * NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive * NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive * NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive For the following versions: Applicable only when configured as a SAML SP or SAML IdP: * NetScaler ADC and NetScaler Gateway before 14.1-73.37 * NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS * NetScaler ADC and NetScaler Gateway before 13.1-64.23 * NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279
- Source
- 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5
- NVD status
- Awaiting Analysis
CVSS 4.0
- Type
- Secondary
- Base score
- 9.5
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- CRITICAL
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-119
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
8
(actively exploited) CISA updated its Citrix NetScaler ADC/Gateway alert for CVE-2026-88779 (KEV) and CVE-2026-107406. Separate reporting ties NetScaler 0-days to Platypus RAT / pre-auth RCE (CVE-2026-88771). #CyberSecurity https://t.co/4ImfnODThK
@DuckButTurttle
13 Oct 2026
14 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 We updated our Alert on critical Citrix NetScaler ADC and Gateway vulnerabilities to include CVE-2026-88779, recently added to the KEV Catalog, and CVE-2026-107406. Orgs should apply patches and review our Alert for more info. 🔗 https://t.co/z66zWaCUMd https://t.co/cPROVx
@CISACyber
13 Oct 2026
4011 Impressions
5 Retweets
24 Likes
4 Bookmarks
2 Replies
0 Quotes
#NØØT_Security_Alerts 🚨 #ALERT — NEW CRITICAL CITRIX NETSCALER MEMORY OVERFLOW THREATENS REMOTE CODE EXECUTION ON SAML-CONFIGURED GATEWAYS October 8, 2026 DISCLOSED BY: Citrix / Cloud Software Group PRODUCT: NetScaler ADC and NetScaler Gateway CVE: CVE-2026-107406 SEVER
@Python_s_
13 Oct 2026
88 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2026-107406: Citrix NetScaler ADC and Gateway SAML Memory Corruption (CVSS 9.5) Critical Vulnerability Alert! Citrix NetScaler ADC and Gateway is affected by CVE-2026-107406. 🔍 Identify Targets via ZoomEye: Search Dork: app="Citrix NetScaler" Exposure: 239.6k insta
@zoomeyebot
12 Oct 2026
35 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Patch Now | Oct 12 SonicWall SMA1000 (CVE-2026-102255): exploited days after patching. Apply the fix now. Citrix NetScaler (CVE-2026-107406, CVSS 9.5): 4th critical NetScaler flaw this month. LMCache (CVE-2026-105192, CVSS 9.8): no patch exists. Block port 5555 now. https://t.
@CERT_UG
12 Oct 2026
127 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
#NØØT_Security_Alerts 🚨 #ALERT — CRITICAL CITRIX NETSCALER SAML FLAW THREATENS REMOTE CODE EXECUTION ON SECURITY GATEWAYS October 8, 2026 DISCLOSED BY: Citrix / Cloud Software Group PRODUCT: NetScaler ADC and NetScaler Gateway CVE: CVE-2026-107406 SEVERITY: Critical —
@Python_s_
12 Oct 2026
51 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Recent critical CVEs: Citrix NetScaler (CVE-2026-107406, Oct 11) faces memory overflow via SAML, risking RCE/DoS. New backend flaws include SQLi (CVE-2026-59508, Oct 11) & XSS (CVE-2026-108925, Oct 11), threatening data privacy/integrity. #Cybersecurity #Vulnerabilities #New
@YourAnon_irc
12 Oct 2026
61 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Citrix urges an immediate patch for CVE-2026-107406 (CVSS 9.5). Memory overflow in NetScaler SAML setups can lead to RCE or DoS. No exploit reported. Source: SecurityWeek. Verify independently. #CyberSecurity #CVE #NetScaler #ThreatIntel
@ThreatAlis
12 Oct 2026
11 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Citrix urges patches for CVE-2026-107406 (CVSS 9.5), a NetScaler ADC/Gateway memory overflow that can lead to RCE or DoS on SAML setups. No exploits reported yet, per Citrix and SecurityWeek. Verify independently. #CyberSecurity #InfoSec #CVE #NetScaler
@ThreatAlis
11 Oct 2026
10 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Patch now: CVE-2026-107406 (CVSS 9.5) is a new NetScaler memory overflow that can lead to RCE or DoS on SAML configs. Earlier patches do not cover it. SecurityWeek, 9 Oct. Verify independently. #CyberSecurity #NetScaler #CVE #ThreatIntel
@ThreatAlis
11 Oct 2026
12 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
New critical NetScaler flaw: CVE-2026-107406 (CVSS 9.5) can mean RCE or DoS on SAML SP/IdP appliances. Citrix bulletin CTX697191; no known exploits yet. Patch to 14.1-73.46 or 13.1-64.29. Verify independently. #CyberSecurity #NetScaler #CVE #Vulnerability #ThreatIntel
@ThreatAlis
11 Oct 2026
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Critical NetScaler overflow can lead to pre-auth RCE or DoS on SAML SP/IdP configs. CVE-2026-107406 (CVSS 9.5). Citrix CTX697191: no known exploits. Patch 14.1-73.46 or 13.1-64.29. Verify independently. #CyberSecurity #InfoSec #CVE #NetScaler
@ThreatAlis
11 Oct 2026
5 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Citrix NetScaler users: a critical security flaw demands attention. ⚠️🔥 Citrix has issued a security update for CVE-2026-107406, highlighting the need to secure affected NetScaler deployments. ⚠️ Critical vulnerability 🎯 NetScaler systems affected 🛡️ Sec
@xcademialtd
10 Oct 2026
53 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
CISA updated its alert on Citrix NetScaler ADC and Gateway zero-days on 9 October. The update adds CVE-2026-107406, includes CVE-2026-88779 after its 4 October addition to the KEV catalog, clarifies a possible relationship between CVE-2026-88779 and CVE-2026-88771, and stresses
@Breachrr
10 Oct 2026
2 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Critical NetScaler alert: CVE-2026-107406 (CVSS v4 9.5) is a memory overflow that can lead to RCE or DoS if ADC/Gateway is a SAML IdP or SP. Citrix CTX697191 (8 Oct) urges upgrades. No unmitigated exploits reported. Verify independently. #CyberSecurity #InfoSec #CVE #NetScaler
@ThreatAlis
10 Oct 2026
0 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
NetScaler critical patch: CVE-2026-107406 (CVSS 9.5) SAML memory overflow can lead to RCE. No workaround. Upgrade to 14.1-73.46 or 13.1-64.29. Source: Citrix CTX697191. Verify independently. #CyberSecurity #InfoSec #CVE #NetScaler #ThreatIntel
@ThreatAlis
10 Oct 2026
0 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
#NØØT_Security_Alerts 🚨 #ALERT — CRITICAL CITRIX NETSCALER MEMORY OVERFLOW COULD ENABLE UNAUTHENTICATED REMOTE CODE EXECUTION October 8, 2026 DISCLOSED BY: Citrix Security / Cloud Software Group PRODUCT: Citrix NetScaler ADC and NetScaler Gateway. CVE: CVE-2026-107406
@Python_s_
10 Oct 2026
47 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Critical NetScaler issue CVE-2026-107406 (CVSS 9.5): memory overflow can lead to RCE or DoS on SAML SP/IdP configs. No workaround. Upgrade to 14.1-73.46 or 13.1-64.29. Citrix CTX697191, Oct 8. Verify independently. #CyberSecurity #NetScaler #CVE #InfoSec
@ThreatAlis
10 Oct 2026
0 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Citrix Patches Critical NetScaler SAML Vulnerability CVE-2026-107406 Citrix issued a critical patch for NetScaler ADC and Gateway addressing CVE-2026-107406, a 9.5 CVSS memory overflow in… Full write-up → link in bio #cybersecurity #infosec #VulnerabilityDisclosure #citrix
@HotaSamit
10 Oct 2026
60 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Critical NetScaler SAML flaw: CVE-2026-107406 (CVSS 9.5) A memory overflow in NetScaler ADC and Gateway can lead to RCE or DoS when the appliance is configured as a SAML SP or SAML IdP. This is a new CVE, separate from the exploited SAML flaw CVE-2026-88779. VulnTracker https:
@vuln_tracker
9 Oct 2026
28 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE advisory: CVE-2026-107406 - netscaler: Protecting Customers: Immediate Guidance for CVE-2026-107406 in NetScaler ADC and NetScaler Gateway. https://t.co/Zhnb2Kt8N7 #CVE #CyberSecurity #NetScaler #NetScalerADC
@vulnipulse
8 Oct 2026
303 Impressions
3 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes