News
cybersecurity New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks - BleepingComputer cybersecurity Hackers compromise 4,800 GitHub accounts to steal cloud credentials - BleepingComputer vulnerability USN-9090-1: Apache HTTP Server vulnerabilities - Ubuntu Security Notices cybersecurity Cyber Experts Weigh In: How to Fight Artex & AntiFox - Dark Reading ai Nvidia privately confirmed it could track chips to fight smuggling, even as industry publicly questioned feasibility - MIT Technology Review cybersecurity Extortion Group Luna Moth Flits Into Law Firms a Second Time - Dark Reading vulnerability USN-8895-2: Sudo vulnerability - Ubuntu Security Notices cybersecurity Major Microsoft Outlook Outage Leaves People With Email Jobs Unable to Email - Wired Security ai How Amplitude ships product improvements in 1–2 days with OpenAI - OpenAI - ChatGPT & AI Research cybersecurity New N-able "4EverAble2Shell" zero-day exploited hours after PoC released - BleepingComputer cybersecurity Apache HTTP Server patches critical HTTP/2 remote code execution flaw - BleepingComputer vulnerability 2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway - CERT-EU Security Advisories vulnerability VU#580079: Arbitrary file read/write vulnerability in ImageMagick-based applications with default configuration - CERT/CC Vulnerability Notes cybersecurity ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories - The Hacker News ai Gemini 4 Hydrogen: everyday coding and agentic workflows for developers - Google - Gemini & AI
1 / 15
All news ›
Vulnerability

2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

CERT-EU Security Advisories ·

On 12 November 2026, the Cloud Software Group published security bulletins for its Citrix products addressing 28 memory flaws in Citrix NetScaler ADC and Citrix NetScaler Gateway. One of these vulnerabilities, CVE-2026-120868, affects every deployment, including those using the default configuration. The vendor bulletin describes the impact as unpredictable behaviour and denial of service. Citrix reports no exploitation, and no public proof-of-concept has been confirmed. CERT-EU strongly recommends upgrading all customer-managed NetScaler ADC and NetScaler Gateway appliances to the fixed releases. Internet-facing Gateway and AAA appliances should be upgraded first.

Continue on CERT-EU Security Advisories ↗ ‹ All news Get the newsletter

The summary and image come from CERT-EU Security Advisories; the image is shown from their website.