{"uuid": "ac03431d-d17b-440f-8b83-692ec1395e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117415790385712130", "content": "Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments\nCitrix has released patches for CVE-2026-107406, a critical (CVSS 9.5) memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that could enable remote code execution or denial-of-service in SAML deployments. The flaw is distinct from the NetScaler zero-day Citrix warned about earlier this week. Administrators are urged to patch immediately. https://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.html", "creation_timestamp": "2026-10-10T08:59:40.437732Z"}