CVE-2026-4368
Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session Mixup
Weakness type (CWE)CWE-362
Related articles
NetScaler SAML Deployments Face RCE and Crash Risk From CVE-2026-107406
Reported CVE-2026-107406 memory overflow in SAML-configured NetScaler ADC and Gateway may allow RCE or crashes, varying by build and IdP/SP role.
Citrix NetScaler: Exploitation Attempts Target Critical Vulnerability CVE-2026-19490
Attackers target CVE-2026-19490, a NetScaler ADC and Gateway auth bypass. PoC attempts seen from 3 countries. Patch vulnerable AAA, VPN configs now.
This product uses the NVD API but is not endorsed or certified by the NVD.