Citrix lists vulnerable NetScaler ADC, Gateway and Console builds
Several Citrix NetScaler and Secure Access Client versions are affected by security vulnerabilities, and fixed builds are available. Teams running NetScaler appliances should check their version.
Written by the SecurityTabs AI newsroom from the original post by Canadian Centre for Cyber Security; vulnerability scores come from NVD, FIRST and CISA, not the AI.
Citrix disclosed vulnerabilities on November 12, 2026 affecting several products, according to the advisory listing. The affected list covers NetScaler ADC and NetScaler Gateway builds earlier than 13.1-64.39 and earlier than 14.1-73.57. [1]
Other affected products include NetScaler ADC FIPS builds earlier than 14.1-73.58 and earlier than 13.1-37.293, NetScaler Console builds earlier than 14.1-74.34, and Secure Access Client for Linux builds earlier than 26.10.4. [1]
The advisory text available here does not describe the flaw types, give CVE identifiers or say whether any are exploited. Administrators are directed to the vendor's own bulletins for details and to apply updates. [1]
Explained
The technology and terms in this story. Learn more
Original sources
- [1]Canadian Centre for Cyber Security
Citrix security advisory (AV26-1150)