Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

Summary by Cyber Security News12 Nov 2026, 16:38 CET

About this summary. This is a short excerpt from the description that The Hacker News published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://thehackernews.com/2026/11/citrix-patches-12-netscaler-and-secure.html

Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below - CVE-2026-120868 (CVSS score: 9.3) - A memory overflow vulnerability in Packet

Read the full article at The Hacker News →

Source attribution: headline and facts are from The Hacker News (thehackernews.com). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Citrix Patches 10 Critical NetScaler Vulnerabilities

2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

CVE-2026-124723: Apache APISIX: unauthorized access to mTLS protected resources

CVE-2026-124716: Apache APISIX: authz-keycloak authorization scope mismatch

CVE-2026-124680: Apache APISIX: Route-level authentication bypass via path normalization mismatch between routing and upstream forwarding

CVE-2026-124679: Apache APISIX: jwe-decrypt and forward-auth may pass a client-supplied identity header