[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fti1yHJN5DG0dHenTfez-8zuEFDuS4EiJFWtDmV6elvA":3},{"article":4,"iocs":47,"watch_terms":73,"solutions":74,"lesson":165},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"ae08adae-4791-4119-a85b-5a13a6a2832f","Citrix Patches 28 Security Vulnerabilities in NetScaler, Including a Critical Flaw in Default Installations","citrix-patches-28-security-vulnerabilities-in-netscaler-including-a-critical-fla-fabc8a","Citrix has released fixes for 28 security flaws in NetScaler ADC and NetScaler Gateway. One of them, CVE-2026-120868, affects every deployment in its default setup. Cloud Software Group published bulletin CTX697305 on November 12, 2026, and rated it Critical. CVE-2026-120868 is a memory overflow in packet processing. It carries a CVSS v4.0 score of 9.3. […] The post Citrix Patches 28 Security Vulnerabilities in NetScaler, Including a Critical Flaw in Default Installations appeared first on Cyber Security News.","Citrix released security patches for 28 vulnerabilities in NetScaler ADC and NetScaler Gateway via bulletin CTX697305 on November 12, 2026. CVE-2026-120868, a critical memory overflow in packet processing with CVSS 9.3, affects every default deployment without requiring authentication or user interaction. The remaining 27 flaws are primarily memory bugs (buffer overflows, out-of-bounds writes, double frees) affecting specific features; most critical vulnerabilities require Gateway configuration or specific services to be enabled.","Citrix patches 28 NetScaler flaws including critical memory overflow affecting all default installations","https:\u002F\u002Fcybersecuritynews.com\u002Fcitrix-patches-netscaler-security-vulnerabilities\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FCitrix-Patches-28-NetScaler-Security-Vulnerabilities-Including-Critical-Flaw-Affecting-All-Default-Installations-2.webp","2026-11-13T14:18:29+00:00","2026-11-13T15:01:25.768947+00:00",9,[17,20,22,25,27],{"name":18,"type":19},"Citrix","vendor",{"name":21,"type":19},"Cloud Software Group",{"name":23,"type":24},"NetScaler ADC","product",{"name":26,"type":24},"NetScaler Gateway",{"name":28,"type":24},"Secure Private Access","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35,40,42],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":41},{"id":29,"icon":31,"name":32,"slug":33},{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[48,52,55,58,60,62,64,66,68,70],{"type":49,"value":50,"context":51},"cve","CVE-2026-120868","Critical memory overflow in packet processing, affects default NetScaler installations, CVSS 9.3",{"type":49,"value":53,"context":54},"CVE-2026-107412","Critical memory overflow, Gateway\u002FAAA configurations, CVSS 9.5",{"type":49,"value":56,"context":57},"CVE-2026-107407","Critical vulnerability in NetScaler ADC\u002FGateway, CVSS 9.3",{"type":49,"value":59,"context":57},"CVE-2026-107408",{"type":49,"value":61,"context":57},"CVE-2026-107409",{"type":49,"value":63,"context":57},"CVE-2026-107410",{"type":49,"value":65,"context":57},"CVE-2026-107415",{"type":49,"value":67,"context":57},"CVE-2026-111334",{"type":49,"value":69,"context":57},"CVE-2026-120864",{"type":49,"value":71,"context":72},"CVE-2026-111338","Medium severity, logs sensitive login data to \u002Fvar\u002Flog\u002Fhttperror.log, CVSS 6.9",[18,23,26],{"controls":75,"vendors":159},[76,105,134],{"slug":77,"name":78,"problem":79,"products":80},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":106,"name":107,"problem":108,"products":109},"patch-management","Automated patch management","Known holes get closed in days, not months.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":135,"name":136,"problem":137,"products":138},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[139,146,151],{"vendor_slug":140,"vendor_name":141,"vendor_logo":142,"product_slug":143,"product_name":141,"url":144,"description":145},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":147,"product_name":148,"url":149,"description":150},"axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":152,"vendor_name":153,"vendor_logo":154,"product_slug":155,"product_name":156,"url":157,"description":158},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",[160],{"slug":161,"name":18,"logo_path":162,"roles":163},"citrix","\u002Fvendor-logos\u002Fcitrix.png",[164],"affected",{"slug":166,"title":167,"body":168,"framework_refs":169,"framework_notes":175},"critical-citrix-netscaler-flaw-in-default-installations-demands-immediate-patching","Critical Citrix NetScaler Flaw in Default Installations Demands Immediate Patching","Citrix disclosed 28 vulnerabilities in NetScaler ADC and Gateway, including a critical memory overflow (CVE-2026-120868, CVSS 9.3) that affects every default deployment without requiring authentication or user interaction. Because the flaw exists in the default configuration, every unpatched NetScaler instance is exposed the moment it is reachable by an attacker — no misconfiguration or privilege escalation is needed. Memory-safety bugs like buffer overflows and double frees are well-understood vulnerability classes, yet they continue to appear in widely deployed network appliances, making timely patching essential. Organizations that lack a structured process for prioritizing and applying vendor patches to internet-facing appliances are at the highest risk, as these devices sit at the network perimeter and are often the first target in an intrusion.",[170,171,172,173,174],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 2: Inventory and Control of Software Assets (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIS2 Article 21(2)(e)","NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks",{"NIS2 Article 21(2)(e)":176,"NIST SP 800-53 SI-2: Flaw Remediation":177,"CIS Control 7: Continuous Vulnerability Management (v8)":178,"CIS Control 2: Inventory and Control of Software Assets (v8)":179,"NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks":180},"This point requires security in acquisition, development, and maintenance including vulnerability handling, which covers the obligation to promptly remediate a critical publicly disclosed vulnerability in a production network appliance.","SI-2 requires organizations to identify, report, and correct information system flaws within defined timeframes, directly addressing the need for timely application of Citrix's patches for these memory-safety vulnerabilities.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities; a structured vulnerability management program would have ensured CVE-2026-120868 was identified and patched within a defined SLA before exploitation.","CIS Control 2 requires maintaining an accurate inventory of software and versions; without knowing every NetScaler instance and its patch level, organizations cannot confirm full remediation of this critical flaw.","This category directly addresses the requirement to act on newly disclosed vulnerabilities like CVE-2026-120868, ensuring organizations either patch promptly or formally accept and document the residual risk."]