Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix has released patches for a critical security vulnerability tracked as CVE-2026-107406 affecting NetScaler ADC and NetScaler Gateway. The flaw is a memory overflow vulnerability that can lead to remote code execution (RCE) or denial-of-service (DoS) under specific configuration conditions. The vulnerability is particularly relevant to deployments using SAML authentication. Citrix has urged administrators to apply the patches promptly. This follows a pattern of critical vulnerabilities affecting Citrix NetScaler products in recent years.