> ## Content Index
> Fetch the complete content index at: https://www.stirup.si/llms.txt
> Use this file to discover other available public pages before exploring further.

# Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
- URL: https://www.stirup.si/citrix-patches-critical-netscaler-flaw-that-could-enable-rce-in-saml-d-282fb784/
- Published: 2026-10-11T17:13:03.000Z
- Updated: 2026-10-11T17:13:03.000Z
- Description: Citrix has released patches for a critical vulnerability in NetScaler ADC and NetScaler Gateway that could allow remote code execution or denial-of-service under specific SAML configuration conditions. The flaw, identified as CVE-2026-107406, has a CVSS score of 9.5 and is tied to SAML identity prov
- Author: Satish Das
- Tags: Security, Stirup Research

## Overview of the Vulnerability

Citrix has issued patches for a critical security flaw in its NetScaler ADC and NetScaler Gateway products. The vulnerability, designated as CVE-2026-107406, is a memory overflow issue that could potentially lead to remote code execution (RCE) or denial-of-service (DoS) under specific conditions. Citrix has assigned a CVSS score of 9.5 out of 10.0 to the flaw, indicating a high level of severity. The vulnerability is particularly relevant to deployments where NetScaler is configured as a SAML identity provider (IdP) or service provider (SP).

## Impact and Configuration Conditions

The vulnerability is not universally applicable to all NetScaler deployments. It only affects instances where the appliance is configured as a SAML IdP or SP. Customers can verify if their systems are at risk by checking for specific configuration entries, such as `add authentication samlAction` for SAML SP configurations or `add authentication samlIdPProfile` for SAML IdP setups.

The affected versions of NetScaler ADC and NetScaler Gateway vary depending on the SAML configuration. For example, when configured as a SAML IdP, the vulnerability impacts versions between 14.1-73.37 and 14.1-73.41, as well as earlier versions in the 13.1 series. When configured as a SAML SP or IdP, the vulnerability affects even earlier versions, including those prior to 13.1-64.23.

## Resolution and Mitigation

Citrix has provided patches for the vulnerability, which are available in the following versions: NetScaler ADC and Gateway 14.1-73.46 and later, 13.1-64.29 and later, and corresponding FIPS versions. Customers are advised to upgrade their NetScaler instances to these versions to mitigate the risk. Additionally, Citrix has warned that Secure Private Access Hybrid deployments using NetScaler instances are also affected and must be updated accordingly.

## Context and Broader Implications

This vulnerability is part of a broader trend of security issues affecting NetScaler products. In recent months, three other flaws (CVE-2026-88771, CVE-2026-88772, and CVE-2026-88779) have been actively exploited in the wild. This highlights the ongoing need for organizations to maintain up-to-date security practices and promptly apply patches when available.

The discovery of this vulnerability was credited to a team of researchers from JPMorgan Chase XOR Team and Maxim Suhanov. Their work underscores the importance of continuous security testing and collaboration between vendors and the broader cybersecurity community.

**Source:** [The Hacker News](https://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.html?ref=stirup.si). Analysis based on publicly available information; no hands-on testing is claimed.