On 12 November 2026, the Cloud Software Group published security bulletins for its Citrix products addressing 28 memory flaws in Citrix NetScaler ADC and Citrix NetScaler Gateway. One of these vulnerabilities, CVE-2026-120868, affects every deployment, including those using the default configuration. The vendor bulletin describes the impact as unpredictable behaviour and denial of service.
2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway
About this summary. This is a short excerpt from the description that CERT-EU published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://cert.europa.eu/publications/security-advisories/2026-020/
Source attribution: headline and facts are from CERT-EU (cert.europa.eu). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Researchers continue to find serious vulnerabilities in internet connected refrigerators
As companies running refrigeration units in the U.S. and Europe recover from recent hacking incidents, threat intelligence firms have disclosed more than a dozen new…
Citrix Patches 10 Critical NetScaler Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass
Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to…
EU Most Wanted: 19 fugitives wanted for targeting the vulnerable
Nineteen fugitives wanted for crimes against children and older people are the focus of a new EU Most Wanted appeal launched on 12 November. Featuring cases from 14…
Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
The Cyber Resilience Act clock doesn’t stop for weekends
In this Help Net Security interview, Aurimas Bakas, CEO of Copla, talks about what the EU Cyber Resilience Act‘s reporting duties mean for manufacturers. He explains why…