DKDKCISSP
Vulnerabilities

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass.

DKCISSP News DeskThe Hacker News12 Nov 2026, 9:08 pm1 min read
Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass
Image courtesy of The Hacker News. Original report
DKCISSP REPORT

Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass.

The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below - Also addressed by Citrix are a number of flaws in NetScaler Console and Secure Access Client for Windows and Linux - The security updates, Citrix said, follow a deeper review of its codebase by integrating artificial intelligence (AI)-assisted code analysis to detect and resolve vulnerabilities with an aim to harden the products before potential threats could materialize.

What happened

Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass.

The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below - Also addressed by Citrix are a number of flaws in NetScaler Console and Secure Access Client for Windows and Linux - The security updates, Citrix said, follow a deeper review of its codebase by integrating artificial intelligence (AI)-assisted code analysis to detect and resolve vulnerabilities with an aim to harden the products before potential threats could materialize.

What to watch next

Watch for revised vendor guidance, fixed versions and mitigation updates.

MORE IN VULNERABILITIES

More cybersecurity reporting

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command InjectionThe Hacker News · 14 Nov 2026, 6:08 pmHackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2The Hacker News · 14 Nov 2026, 5:53 pmHackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi FilesThe Hacker News · 14 Nov 2026, 5:53 pmPostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCEThe Hacker News · 13 Nov 2026, 10:28 pm