CVE-2026-111344

Citrix has patched 12 critical vulnerabilities across its NetScaler ADC, NetScaler Gateway, NetScaler Console, and Secure Access Client products. The flaws include multiple memory overflow and memory corruption vulnerabilities that could lead to denial-of-service conditions, as well as improper authentication and privilege management issues that could allow unauthenticated access or privilege escalation. The most severe vulnerability, CVE-2026-107412, has a CVSS score of 9.5. Citrix urges customers to apply updates despite no known active exploitation at the time of disclosure.