2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway
- Command
- CYBERCOM
- Region
- Europe
- Category
- Cyber threat
- Source
- CERT-EU Security Advisories
Cyber ThreatOfficial statement
At a glance
- What
- Cyber Threat
- Who
- CERT-EU Security Advisories
- When
- Nov 12, 2026 at 5:20 PM UTC
Official Statements
CERT-EU Security Advisories, November 12: “On 12 November 2026, the Cloud Software Group published security bulletins for its Citrix products addressing 28 memory flaws in Citrix NetScaler ADC and Citrix NetScaler Gateway. One of these vulnerabilities, CVE-2026-120868, affects every deployment, including those using the default configuration. The vendor bulletin describes the impact as unpredictable behaviour and denial of service. Citrix reports no exploitation, and no public proof-of-concept has been confirmed.”
Source: CERT-EU Security Advisories
