Citrix Patches 10 Critical NetScaler Vulnerabilities
Source SecurityWeek
Mentioned vulnerabilities
Fixed in 14.1-74.34 : patch affected systems soon.
Data as of 13 Nov 2026, 09:43 UTC
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in 14.1-74.34, 14.1-73.58, 14.1-73.57 +2
What to do
AI-suggested
Citrix has released official patches for all identified vulnerabilities. Users should update NetScaler ADC and Gateway to versions 14.1-73.57 or later, 13.1-64.39 or later, 14.1-73.58 FIPS or later, and 13.1-FIPS and 13.1-NDcPP 13.1-37.293 or later. For NetScaler Console, update to version 14.1-74.34 or later. Immediate application of these patches is recommended to mitigate the risks. No other mitigation actions are specified by the vendor.
Description
Citrix has released patches for 28 vulnerabilities in NetScaler ADC and Gateway, including 10 critical flaws primarily caused by memory overflow issues affecting various components such as Packet Processing, SMPP traffic, DNS/DoH, and others. Successful exploitation could cause unexpected behavior or denial-of-service (DoS) conditions. Additionally, a critical unauthenticated access vulnerability in NetScaler Console was patched. No exploitation in the wild has been reported.