WID-SEC-W-2026-0836

DeutschShown in its original language — a full translation is planned for a future version.

Citrix Systems NetScaler: Mehrere Schwachstellen

view advisory published 2026-03-23

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Citrix Systems NetScaler ausnutzen, um Informationen offenzulegen und um eine Benutzersitzung zu übernehmen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-4368US	—	3.44% (89th)	—	2026-03-23
Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session Mi…
CVE-2026-3055US	critical9.8OT critical	91.5% (100th)	KEV	2026-03-23
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

references

External citations — patches, advisories, analysis.

CERT-EU Security Advisory 2026-003 vom 2026-03-23external
Citrix Tech Zone Blog vom 2026-03-23external
WatchTower Labs Report vom 2026-03-29external
Citrix Security Bulletin CTX696300 vom 2026-03-23external
WID-SEC-W-2026-0836 - CSAF Versionself
WID-SEC-2026-0836 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan