Search: CVE-2026-120864

CVE-2026-120864 is a critical memory overflow vulnerability in the ICA proxy component of Citrix NetScaler ADC and NetScaler Gateway. This flaw can cause unpredictable or erroneous behavior, including denial of service conditions. It affects multiple versions of the product prior to specific fixed releases. The vulnerability has a high CVSS 4.0 score of 9.3, indicating network exploitable without privileges or user interaction. Fixed versions are available, and users should upgrade to these to mitigate the risk.