CVE-2026-107406

Vendor

Citrix

Product

NetScaler ADC / Gateway

CVSS v3.1

9.8

EPSS

0.82 (p100)

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 92
   Research ThreatLabz 15d ago

   CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability

   IntroductionOn September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution (RCE) vulnerability affecting NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The vulnerability carries a…

   Exploited CVSS 9.8 EPSS 0.82 CVE-2026-88771CVE-2026-107406CVE-2026-75650 Citrix
2. 80
   CISA alert CISA 27 Sep 2026

   Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

   Update October 9, 2026 : CISA has updated this Alert to: (1) include CVE-2026-107406; (2) include CVE-2026-88779 following its addition to the KEV Catalog on Oct. 4, 2026; (3) clarify the potential relationship between…

   Exploited EPSS 0.78 No fix yet CVE-2026-107406CVE-2026-88779CVE-2026-88771+7 more Citrix
3. 30
   CVE NVD 23d ago

   Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC.

   Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following…

   CVE-2026-107406 Citrix