Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

Citrix has shipped fixes for a dozen vulnerabilities across NetScaler ADC, NetScaler Gateway, NetScaler Console, and Secure Access Client for Windows and Linux. Nine of the bugs sit in NetScaler ADC/Gateway components such as packet processing, SMPP, DNS/DoH, Push, Email OTP, and Endpoint Analysis, carrying CVSS scores between 9.3 and 9.5 and risking denial-of-service or unpredictable behavior (tracked as CVE-2026-120868, CVE-2026-107407, CVE-2026-107408, CVE-2026-107409, CVE-2026-107410, CVE-2026-107412, CVE-2026-107415, CVE-2026-111344, and CVE-2026-120864). Separately, CVE-2026-120869 (CVSS 9.4) in NetScaler Console lets an unauthenticated attacker bypass login controls, while CVE-2026-118268 and CVE-2026-118269 (both CVSS 8.5) let low-privileged users gain SYSTEM or root access on the Windows and Linux Secure Access Client respectively. Citrix says the flaws were caught through AI-assisted code review and reports no known in-the-wild exploitation, but recommends upgrading promptly to the fixed NetScaler, Console, and Secure Access Client builds listed in its advisory.