Citrix NetScaler

Citrix has released security patches for a critical vulnerability in NetScaler that could allow remote code execution in deployments using SAML authentication. The flaw could let attackers run arbitrary code on affected appliances, posing a serious risk to enterprises relying on NetScaler for application delivery. Administrators are being urged to apply the updates promptly and review their SAML configurations for potential exposure.

Security teams are being urged to patch two high-severity flaws. A pre-authentication file read in Atlassian Data Center products, tracked as CVE-2026-21589 with a CVSS score of 9.3, has reportedly been probed in the wild since October 6, with fixed Confluence builds including 9.2.26 and 10.2.19; admins are told to check logs for URL-encoded path traversal. Citrix NetScaler CVE-2026-107406, scoring 9.5, affects SAML SP and IdP configurations and is fixed in 14.1-73.46 and 13.1-64.29.

Citrix is urging customers to immediately patch a critical vulnerability affecting its NetScaler products. The company's advisory, reported by SecurityWeek, signals that the flaw could pose serious security risks if left unaddressed. Administrators running NetScaler appliances are being told to apply the fix as soon as possible to avoid potential exploitation.