{"id":12613,"date":"2026-11-12T12:07:41","date_gmt":"2026-11-12T18:07:41","guid":{"rendered":"https:\/\/beaconlab.us\/publicacion\/alert-2026-163-critical-vulnerabilities-in-citrix-netscaler-adc-gateway-and-console\/"},"modified":"2026-11-12T12:11:00","modified_gmt":"2026-11-12T18:11:00","slug":"alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/","title":{"rendered":"Alert 2026-163 Critical flaws in Citrix NetScaler ADC, Gateway and Console"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Affected product(s):&nbsp;<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Product<\/strong><\/td><td><strong>Affected versions<\/strong><\/td><td><strong>Fixed version<\/strong><\/td><\/tr><tr><td><strong>NetScaler ADC and NetScaler Gateway 14.1<\/strong><\/td><td>Earlier than 14.1-73.57<\/td><td>14.1-73.57 and later<\/td><\/tr><tr><td><strong>NetScaler ADC and NetScaler Gateway 13.1<\/strong><\/td><td>Earlier than 13.1-64.39<\/td><td>13.1-64.39 and later 13.1<\/td><\/tr><tr><td><strong>NetScaler ADC 14.1-FIPS<\/strong><\/td><td>Earlier than 14.1-73.58 FIPS<\/td><td>14.1-73.58 FIPS and later 14.1-FIPS<\/td><\/tr><tr><td><strong>NetScaler ADC 13.1-FIPS and 13.1-NDcPP<\/strong><\/td><td>Earlier than 13.1-37.293<\/td><td>13.1-37.293 and later 13.1-FIPS and 13.1-NDcPP<\/td><\/tr><tr><td><strong>NetScaler Console 14.1<\/strong><\/td><td>Earlier than 14.1-74.34<\/td><td>14.1-74.34 and later<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The ADC and Gateway advisory (CTX697305) applies to customer-managed installations, including NetScaler instances in Secure Private Access Hybrid. The vendor updates the cloud services it manages, and Adaptive Authentication, on its own. NetScaler Console is a separate product, covered in bulletin CTX697320. Branches 12.1 and 13.0 are not listed in today&#8217;s advisory; they no longer receive patches and should be moved to a supported branch.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Description<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Twenty-eight vulnerabilities have been published in Citrix NetScaler ADC and NetScaler Gateway, in bulletin CTX697305 of Nov 12, 2026, nine of them rated critical by the vendor. The headline issue is CVE-2026-120868, CVSS 4.0 9.3, critical, which affects all installations, including the default configuration: no additional feature is required. The highest score is CVE-2026-107412, CVSS 4.0 9.5, critical, on appliances configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or an AAA virtual server. On the same day, in bulletin CTX697320, the vendor published CVE-2026-120869 in NetScaler Console, CVSS 4.0 9.3, critical. The scores given are the vendor&#8217;s CVSS 4.0 ratings. The vendor does not claim remote code execution: it describes unpredictable or incorrect behavior, or a denial of service.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>CVE<\/strong><\/td><td><strong>CVSS 4.0<\/strong><\/td><td><strong>What it is<\/strong><\/td><td><strong>Precondition<\/strong><\/td><\/tr><tr><td><strong>CVE-2026-107412<\/strong><\/td><td>9.5, critical<\/td><td>Several memory overflows; unpredictable behavior or DoS<\/td><td>Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA<\/td><\/tr><tr><td><strong>CVE-2026-120868<\/strong><\/td><td>9.3, critical<\/td><td>Memory overflow in packet processing; same impact<\/td><td>All ADC and Gateway installations (default configuration)<\/td><\/tr><tr><td><strong>CVE-2026-107407<\/strong><\/td><td>9.3, critical<\/td><td>Overflow in SMPP traffic<\/td><td>SMPP-type LB or CS virtual server<\/td><\/tr><tr><td><strong>CVE-2026-107408<\/strong><\/td><td>9.3, critical<\/td><td>Memory corruption in DNS or DNS-over-HTTPS<\/td><td>DNS load balancing and recursive DNS resolution<\/td><\/tr><tr><td><strong>CVE-2026-107409<\/strong><\/td><td>9.3, critical<\/td><td>Memory corruption in DNS-over-HTTPS (double free)<\/td><td>DNS-over-HTTPS (DoH) load balancing<\/td><\/tr><tr><td><strong>CVE-2026-107410<\/strong><\/td><td>9.3, critical<\/td><td>Overflow in NetScaler Push<\/td><td>PUSH-type LB virtual server<\/td><\/tr><tr><td><strong>CVE-2026-107415<\/strong><\/td><td>9.3, critical<\/td><td>Overflow in Email OTP authentication<\/td><td>Email Action configured<\/td><\/tr><tr><td><strong>CVE-2026-111344<\/strong><\/td><td>9.3, critical<\/td><td>Overflow in Endpoint Analysis (EPA\/EPAS)<\/td><td>VPN or AAA virtual server with Endpoint Analysis<\/td><\/tr><tr><td><strong>CVE-2026-120864<\/strong><\/td><td>9.3, critical<\/td><td>Overflow in ICA proxy<\/td><td>VPN Gateway, AAA, or HDX-type CR virtual server<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The rest of the twenty-eight are also, for the most part, memory issues tied to specific features, with the same kind of impact described by the vendor, and rated high or medium. Among those identified are: RTSP ALG (CVE-2026-107411); SAML (CVE-2026-107413); WebAuth (CVE-2026-107414); KBA (CVE-2026-111340); client-certificate authentication (CVE-2026-111341); LDAP (CVE-2026-111342); authentication request (CVE-2026-111343); Base64 decoding in advanced policy expressions or Application Firewall (CVE-2026-111347); and SSL\/TLS\/DTLS in scenarios with an ECH profile, Intel QAT Coleto platforms with ECH, or a SafeNet HSM key (CVE-2026-120867). CVE-2026-111348, rated medium, is local: sensitive authentication material can be written to \/var\/log\/httperror.log, and local read access is required on a system where a logout has occurred; it is not a remote exposure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Other issues in the same bulletin, described by function without forcing an identifier when it was not matched in this review, affect request handling on the data path, HTTP\/2, Application Firewall decompression or inspection, load balancing of Diameter, SIP over TCP, MQTT or RADIUS, GSLB and geolocation, SIP ALG or DNS response-section logging, HTTP\/3 (QUIC), BGP when a neighbor is configured without TCP-MD5 authentication, and the management plane, which requires reaching the NSIP or NSIP6 from an untrusted host.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On NetScaler Console, CVE-2026-120869, CVSS 4.0 9.3, critical, allows an unauthenticated attacker to bypass authentication controls and access restricted resources on the appliance. It is fixed in 14.1-74.34.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The vendor reports no knowledge of exploitation of these vulnerabilities. No public proof of concept was identified. This product line has been exploited quickly in the past, as covered in <a href=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-110-active-exploitation-of-0-day-vulnerabilities-in-citrix\/\">Alert 2026-110<\/a> and <a href=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-136-critical-flaw-in-citrix-netscaler-adc-and-gateway-allows-http-request-smuggling\/\">Alert 2026-136<\/a>. The builds that closed those alerts are not sufficient against this batch: another update is required.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Mitigation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The vendor did not publish a workaround. The only fix it indicates is to update. Inventory NetScaler ADC, Gateway and Console appliances, record the exact branch and build, and prioritize internet-exposed devices configured as a Gateway or AAA, without excluding the rest: CVE-2026-120868 reaches all installations, including the default configuration. Checking for SMPP, DoH, Push, Email OTP, EPA or ICA proxy helps size the other critical CVEs, but it does not remove the need to patch.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As a hardening practice \u2014 not as an official mitigation \u2014 the management interface (NSIP or NSIP6) and NetScaler Console should not be exposed to the Internet, and access should be limited to trusted administration hosts. One of the memory issues in the ADC and Gateway bulletin requires reaching that management address.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These measures do not replace the update. The patch does not undo a prior compromise.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Detection<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The vendor did not publish indicators of compromise.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Solution<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The solution is to update each product to the fixed build of its branch, or later. The builds from alerts 2026-110 and 2026-136 (14.1-73.37 and 13.1-64.23, and the equivalent FIPS builds from that bulletin) and those from alert 2026-117 (14.1-73.49 and 13.1-64.32) are not sufficient against this batch. Prioritize Gateways and AAA virtual servers exposed to the Internet, without leaving the rest unpatched, because CVE-2026-120868 affects the default configuration. In Secure Private Access Hybrid, customer-managed NetScaler instances must be updated. The vendor updates the cloud services it manages, and Adaptive Authentication, on its own. Branches 12.1 and 13.0 do not receive patches; they should be moved to a supported, already fixed branch.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Product \/ branch<\/strong><\/td><td><strong>Fix<\/strong><\/td><\/tr><tr><td><strong>NetScaler ADC and Gateway 14.1<\/strong><\/td><td>14.1-73.57 or later<\/td><\/tr><tr><td><strong>NetScaler ADC and Gateway 13.1<\/strong><\/td><td>13.1-64.39 or later 13.1<\/td><\/tr><tr><td><strong>NetScaler ADC 14.1-FIPS<\/strong><\/td><td>14.1-73.58 FIPS or later 14.1-FIPS<\/td><\/tr><tr><td><strong>NetScaler ADC 13.1-FIPS and 13.1-NDcPP<\/strong><\/td><td>13.1-37.293 or later 13.1-FIPS and 13.1-NDcPP<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">For information on how to update, visit the following link:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/support.citrix.com\/support-home\/kbsearch\/article?articleNumber=CTX697305\">https:\/\/support.citrix.com\/support-home\/kbsearch\/article?articleNumber=CTX697305<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>NetScaler Console<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On NetScaler Console, the solution is to update to 14.1-74.34 or later. The management console should not be left reachable from the Internet; that restriction does not replace the patch.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For information on how to update, visit the following link:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/support.citrix.com\/support-home\/kbsearch\/article?articleNumber=CTX697320\">https:\/\/support.citrix.com\/support-home\/kbsearch\/article?articleNumber=CTX697320<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Additional information:&nbsp;<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Citrix \u2014 bulletin CTX697305 (NetScaler ADC and Gateway):<br><a href=\"https:\/\/support.citrix.com\/support-home\/kbsearch\/article?articleNumber=CTX697305\" target=\"_blank\" rel=\"noopener\">https:\/\/support.citrix.com\/support-home\/kbsearch\/article?articleNumber=CTX697305<\/a><\/li>\n\n\n\n<li>Citrix \u2014 bulletin CTX697320 (NetScaler Console, CVE-2026-120869):<br><a href=\"https:\/\/support.citrix.com\/support-home\/kbsearch\/article?articleNumber=CTX697320\" target=\"_blank\" rel=\"noopener\">https:\/\/support.citrix.com\/support-home\/kbsearch\/article?articleNumber=CTX697320<\/a><\/li>\n\n\n\n<li>NetScaler \u2014 CVEs listed in Security Advisory:<br><a href=\"https:\/\/docs.netscaler.com\/us\/en\/netscaler-application-delivery-management-software\/current-release\/infrastructure\/security-advisory-dashboard\/supported-cve.html\" target=\"_blank\" rel=\"noopener\">https:\/\/docs.netscaler.com\/us\/en\/netscaler-application-delivery-management-software\/current-release\/infrastructure\/security-advisory-dashboard\/supported-cve.html<\/a><\/li>\n\n\n\n<li>CVE.org \u2014 CVE-2026-120869:<br><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-120869\" target=\"_blank\" rel=\"noopener\">https:\/\/www.cve.org\/CVERecord?id=CVE-2026-120869<\/a><\/li>\n\n\n\n<li>Alert 2026-110 \u2014 Active exploitation of 0-day vulnerabilities in Citrix:<br><a href=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-110-active-exploitation-of-0-day-vulnerabilities-in-citrix\/\" target=\"_blank\" rel=\"noopener\">https:\/\/beaconlab.us\/publicacion\/alerta-2026-110-explotacion-activa-devulnerabilidades-0-day-en-citrix\/<\/a><\/li>\n\n\n\n<li>Alert 2026-136 \u2014 Critical flaw in Citrix NetScaler ADC and Gateway allows HTTP request smuggling:<br><a href=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-136-critical-flaw-in-citrix-netscaler-adc-and-gateway-allows-http-request-smuggling\/\" target=\"_blank\" rel=\"noopener\">https:\/\/beaconlab.us\/publicacion\/alerta-2026-136-falla-critica-en-citrix-netscaler-adc-y-gateway-permite-contrabando-de-solicitudes-http\/<\/a><\/li>\n<\/ul>\n\n","protected":false},"featured_media":12347,"template":"","class_list":["post-12613","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"Nine critical flaws in Citrix NetScaler ADC, Gateway and Console (CVE-2026-120868, CVSS 9.3). Update to the fixed builds.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alert 2026-163: critical flaws in Citrix NetScaler\" \/>\n\t\t<meta property=\"og:description\" content=\"Nine critical flaws in Citrix NetScaler ADC, Gateway and Console (CVE-2026-120868, CVSS 9.3). Update to the fixed builds.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-citrix-2026-163-1200x630-1.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-citrix-2026-163-1200x630-1.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-11-12T18:07:41+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-11-12T18:11:00+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alert 2026-163: critical flaws in Citrix NetScaler\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Nine critical flaws in Citrix NetScaler ADC, Gateway and Console (CVE-2026-120868, CVSS 9.3). Update to the fixed builds.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-citrix-2026-163-1200x630-1.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\\\/#listItem\",\"name\":\"Alert 2026-163 Critical flaws in Citrix NetScaler ADC, Gateway and Console\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\\\/#listItem\",\"position\":2,\"name\":\"Alert 2026-163 Critical flaws in Citrix NetScaler ADC, Gateway and Console\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\\\/\",\"name\":\"Alert 2026-163: critical flaws in Citrix NetScaler\",\"description\":\"Nine critical flaws in Citrix NetScaler ADC, Gateway and Console (CVE-2026-120868, CVSS 9.3). Update to the fixed builds.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/citrix-logo-destacada.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\\\/#mainImage\",\"width\":600,\"height\":600,\"caption\":\"Logo de Citrix\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\\\/#mainImage\"},\"datePublished\":\"2026-11-12T12:07:41-06:00\",\"dateModified\":\"2026-11-12T12:11:00-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alert 2026-163: critical flaws in Citrix NetScaler","description":"Nine critical flaws in Citrix NetScaler ADC, Gateway and Console (CVE-2026-120868, CVSS 9.3). Update to the fixed builds.","canonical_url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/#listItem","name":"Alert 2026-163 Critical flaws in Citrix NetScaler ADC, Gateway and Console"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/#listItem","position":2,"name":"Alert 2026-163 Critical flaws in Citrix NetScaler ADC, Gateway and Console","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/en\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/en\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/#webpage","url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/","name":"Alert 2026-163: critical flaws in Citrix NetScaler","description":"Nine critical flaws in Citrix NetScaler ADC, Gateway and Console (CVE-2026-120868, CVSS 9.3). Update to the fixed builds.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/beaconlab.us\/en\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/citrix-logo-destacada.png","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/#mainImage","width":600,"height":600,"caption":"Logo de Citrix"},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/#mainImage"},"datePublished":"2026-11-12T12:07:41-06:00","dateModified":"2026-11-12T12:11:00-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/en\/#website","url":"https:\/\/beaconlab.us\/en\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"en-US","publisher":{"@id":"https:\/\/beaconlab.us\/en\/#organization"}}]},"og:locale":"en_US","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alert 2026-163: critical flaws in Citrix NetScaler","og:description":"Nine critical flaws in Citrix NetScaler ADC, Gateway and Console (CVE-2026-120868, CVSS 9.3). Update to the fixed builds.","og:url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-citrix-2026-163-1200x630-1.png","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-citrix-2026-163-1200x630-1.png","article:published_time":"2026-11-12T18:07:41+00:00","article:modified_time":"2026-11-12T18:11:00+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alert 2026-163: critical flaws in Citrix NetScaler","twitter:description":"Nine critical flaws in Citrix NetScaler ADC, Gateway and Console (CVE-2026-120868, CVSS 9.3). Update to the fixed builds.","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-citrix-2026-163-1200x630-1.png"},"aioseo_meta_data":{"post_id":"12613","title":"Alert 2026-163: critical flaws in Citrix NetScaler","description":"Nine critical flaws in Citrix NetScaler ADC, Gateway and Console (CVE-2026-120868, CVSS 9.3). Update to the fixed builds.","keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"custom_image","og_image_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-citrix-2026-163-1200x630-1.png","og_image_width":"0","og_image_height":"0","og_image_custom_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-citrix-2026-163-1200x630-1.png","og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"custom_image","twitter_image_url":null,"twitter_image_custom_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-citrix-2026-163-1200x630-1.png","twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2026-11-12 18:09:24","updated":"2026-11-12 18:12:59","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/en\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlert 2026-163 Critical flaws in Citrix NetScaler ADC, Gateway and Console\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/en\/"},{"label":"Alert 2026-163 Critical flaws in Citrix NetScaler ADC, Gateway and Console","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-163-critical-flaws-in-citrix-netscaler-adc-gateway-and-console\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":2,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12613\/revisions"}],"predecessor-version":[{"id":12615,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12613\/revisions\/12615"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media\/12347"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media?parent=12613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}