Citrix releases patches addressing multiple critical security flaws affecting its NetScaler ADC and related products. Reports describe vulnerabilities that could enable denial-of-service conditions or trigger unexpected behavior, with at least one issue tied to a high-severity memory overflow in packet processing.
One widely cited vulnerability is CVE-2026-120868, described as a memory overflow with a CVSS v4.0 score of 9.3, affecting deployments running vulnerable NetScaler ADC and Gateway software, including default configurations. Coverage also notes that Citrix fixes span additional NetScaler components and, according to one outlet, include Secure Access Client flaws with an authentication-bypass risk.
Across the outlets, emphasis varies between the number of patched vulnerabilities, the most prominent CVE details (such as the CVSS score and affected product scope), and whether the roundup highlights authentication bypass alongside DoS. Overall, the reports agree that the issues are critical, exploitation could cause service disruption or compromise authentication pathways, and urgent patching is recommended.
