Citrix warns administrators about a new critical NetScaler RCE vulnerability

Citrix has warned IT administrators to immediately patch NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. The vulnerability, tracked as CVE-2026-107406, may allow remote code execution on targeted devices or cause a denial-of-service condition. Citrix said it was not aware of any unmitigated exploitation of this vulnerability when the bulletin was published.