{"metadata": {"vulnerability": "CVE-2026-107406", "count": 90, "kinds": {"milestone": 6, "sighting": 70, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0410", "record": "NCSC-2026-0410", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-08T00:18:26.020Z", "date_only": false, "value": "2026-10-08T00:18:26.020Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-107406", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-08T21:00:00Z", "date_only": false, "value": "2026-10-08T21:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / NetScaler", "record": "CVE-2026-107406", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-08T21:10:10.924Z", "date_only": false, "value": "2026-10-08T21:10:10.924169Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117407337579547632", "record": "cve-2026-107406", "field": "creation_timestamp", "uuid": "2c80067f-fc12-4eaa-8541-09228a7dff2a", "content": "I'm tired, boss.\nA new #Citrix CVE affecting SAML IdP/SP-configured devices is out.\nhttps://ifin.network/t/cve-2026-107406-somehow-another-citrix-netscaler-saml-vulnerability/891\n#ThreatIntel #ThreatIntelligence #IFIN", "url": "https://infosec.exchange/ap/users/115741367687413652/statuses/117407337579547632"}, {"timestamp": "2026-10-08T21:18:08.336Z", "date_only": false, "value": "2026-10-08T21:18:08.336Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-107406", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-08T21:18:08.336Z", "date_only": false, "value": "2026-10-08T21:18:08.336Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / NetScaler", "record": "CVE-2026-107406", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T21:23:10.634Z", "date_only": false, "value": "2026-10-08T21:23:10.634598Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/francisck.com/post/3mxfffdzhqs2q", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "54282751-d509-44a0-8e91-1bf439226005", "content": "A *new* SAML RCE for Citrix is out. \n\nThe new vulnerability (CVE-2026-107406) is only applicable if you're running your NetScaler deployment as a SAML *Identity Provider*. \n\nIf you\u2019re using Citrix as a service provider &  patched last weekend you\u2019re ok.\n\nSurely the madness will stop someday. Right?", "url": "https://bsky.app/profile/francisck.com/post/3mxfffdzhqs2q"}, {"timestamp": "2026-10-08T22:08:11.604Z", "date_only": false, "value": "2026-10-08T22:08:11.604038Z", "kind": "sighting", "label": "Seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117407564606000783", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "b9f46f99-d50a-4fec-808f-615fe727eed1", "content": "There\u2019s yet another Citrix Netscaler vuln (new patch today) which allows unauth RCE - CVE-2026-107406 \nSame attack surface (SAML) as two of the other vulns exploited in the wild during the past month.", "url": "https://cyberplace.social/users/GossiTheDog/statuses/117407564606000783"}, {"timestamp": "2026-10-08T22:17:26Z", "date_only": false, "value": "2026-10-08T22:17:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-X62M-6223-4VQ2", "record": "GHSA-X62M-6223-4VQ2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-08T22:17:26.847Z", "date_only": false, "value": "2026-10-08T22:17:26.847", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-107406", "record": "FKIE_CVE-2026-107406", "field": "published"}, {"timestamp": "2026-10-08T23:18:46.380Z", "date_only": false, "value": "2026-10-08T23:18:46.380169Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mxflu2mfkc25", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "cca75fba-4d2f-4190-8696-142638bc5cf3", "content": "#Murmeltier-Tag Kritische #Schwachstelle CVE-2026-107406 (CVSS 9.4) in #Citrix NetScaler ADC / Citrix NetScaler Gateway (8.10.2026) wenn diese Appliances als SAML-SP oder SAML-IdP konfiguriert sind. Also patchen. \n\nborncity.com/blog/2026/10...", "url": "https://bsky.app/profile/etguenni.bsky.social/post/3mxflu2mfkc25"}, {"timestamp": "2026-10-08T23:19:00.866Z", "date_only": false, "value": "2026-10-08T23:19:00.866452Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/117407844854479383", "record": "cve-2026-107406", "field": "creation_timestamp", "uuid": "68941bd8-11c9-4e9d-a0ed-a34dbec40da7", "content": "#Murmeltier-Tag Kritische #Schwachstelle CVE-2026-107406 (CVSS 9.4) in #Citrix NetScaler ADC / Citrix NetScaler Gateway (8.10.2026) wenn diese Appliances als SAML-SP oder SAML-IdP konfiguriert sind. Also patchen. \nhttps://borncity.com/blog/2026/10/09/kritische-schwachstelle-cve-2026-107406-in-citrix-netscaler-adc-citrix-netscaler-gateway-8-10-2026/", "url": "https://social.tchncs.de/users/gborn/statuses/117407844854479383"}, {"timestamp": "2026-10-08T23:50:04.992Z", "date_only": false, "value": "2026-10-08T23:50:04.992289Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfnm2hmey2h", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "7bbef472-5bf7-4262-b455-6b457fe8d209", "content": "CVE-2026-107406 - adc\nCertain versions of NetScaler ADC and NetScaler Gateway that act as SAML identity or service providers may allow a memory overflow, which could let an attacker stop the device or run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adc #netscaler #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfnm2hmey2h"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1285", "record": "CERTFR-2026-AVI-1285", "field": "last_revision_date"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": true, "value": "2026-10-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1285", "record": "CERTFR-2026-AVI-1285", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-107406", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-107406", "record": "FKIE_CVE-2026-107406", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1285", "record": "CERTFR-2026-AVI-1285", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-09T00:08:29.046Z", "date_only": false, "value": "2026-10-09T00:08:29.046946Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfomwxhnq2l", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "954a820d-1713-409c-adad-8c2d3ac4e912", "content": "\ud83d\udea8 CVE-2026-107406 \u2014 CVSS 9.5 CRITICAL\n\nMemory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetSca...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107406\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfomwxhnq2l"}, {"timestamp": "2026-10-09T00:31:44Z", "date_only": false, "value": "2026-10-09T00:31:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X62M-6223-4VQ2", "record": "GHSA-X62M-6223-4VQ2", "field": "published"}, {"timestamp": "2026-10-09T01:39:04.595Z", "date_only": false, "value": "2026-10-09T01:39:04.595190Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxftovz6ax2t", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "d66ed280-36db-452b-826d-666012c4a21c", "content": "Critical Citrix NetScaler vulnerability CVE-2026-107406 (CVSS 9.5) can lead to RCE on SAML-configured ADC and Gateway. Upgrade now.\n\n#Citrix #NetScaler #NetScalerGateway #CVE2026107406 #SAML #RCE #PatchNow #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxftovz6ax2t"}, {"timestamp": "2026-10-09T01:54:39Z", "date_only": false, "value": "2026-10-09T01:54:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2026/10/weitere-kritische-sicherheitslucke-in-citrix-netscaler-adc-und-netscaler-gateway-updates-verfugbar", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "488f57ab-cb7e-4f0e-a308-c06ce67e8250", "url": "https://www.cert.at/de/warnungen/2026/10/weitere-kritische-sicherheitslucke-in-citrix-netscaler-adc-und-netscaler-gateway-updates-verfugbar"}, {"timestamp": "2026-10-09T02:31:01.084Z", "date_only": false, "value": "2026-10-09T02:31:01.084581Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxfwlskgtd2m", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "bd009496-dfcc-4098-9dca-ccd27ab8236b", "content": "Kwetsbaarheid in NetScaler kan leiden tot verreikende beveiligingsrisico's\n\nEen kritieke beveiligingskwetsbaarheid, met CVE-ID CVE-2026-107406, is ontdekt in NetScaler ADC en NetScaler Gateway. Deze kwetsbaarheid, die wordt geclassificeerd als CWE-119, kan leiden tot uitvoering van ext...", "url": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxfwlskgtd2m"}, {"timestamp": "2026-10-09T03:01:18.734Z", "date_only": false, "value": "2026-10-09T03:01:18.734037Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3okftkumik35k", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "c94e198f-2460-40db-9688-5036f7eb1b19", "content": "Critical NetScaler RCE Vulnerability CVE-2026-107406", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3okftkumik35k"}, {"timestamp": "2026-10-09T05:00:07Z", "date_only": false, "value": "2026-10-09T05:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104740", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "9758be62-af51-4f52-8fd9-4ac766b58723", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a citrix-netscaler-rce-cve-2026-107406\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a techupdate24\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-09 04:38:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104740"}, {"timestamp": "2026-10-09T05:05:15.333Z", "date_only": false, "value": "2026-10-09T05:05:15.333364Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pingoru.bsky.social/post/3mxg77mbayy2v", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "ac13f423-cbba-4535-8bc4-4ee0124dbfd3", "content": "\u26a0\ufe0f Trimble Transportation is reporting a Incident since 05:00 UTC\n\n\"NetScaler Security Upgrades (CVE-2026-107406)\"\n\nLive timeline \u2192 https://pingoru.io/providers/trimble-transportation/incidents/12189473\n\n#TrimbleTransportation #TrimbleTransportationDown", "url": "https://bsky.app/profile/pingoru.bsky.social/post/3mxg77mbayy2v"}, {"timestamp": "2026-10-09T06:31:29Z", "date_only": false, "value": "2026-10-09T06:31:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-1023", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "58a24d45-6d12-4f73-b403-1a1411caf69b", "url": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-1023"}, {"timestamp": "2026-10-09T07:13:29Z", "date_only": false, "value": "2026-10-09T07:13:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityIL/87747", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "72583766-bd77-41cf-9606-a7fa62dd7d9b", "content": "\u26d4\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-NetScaler ADC \u05d5-NetScaler Gateway.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2026-107406 \u05d3\u05d9\u05e8\u05d5\u05d2 \u05e1\u05d9\u05db\u05d5\u05df CVSS 9.5 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05db\u05d0\u05df.", "url": "https://t.me/CyberSecurityIL/87747"}, {"timestamp": "2026-10-09T07:13:29Z", "date_only": false, "value": "2026-10-09T07:13:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityIL/9614", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "fbfb6304-a1fe-4819-93d6-7e8a33213806", "content": "\u26d4\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-NetScaler ADC \u05d5-NetScaler Gateway.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2026-107406 \u05d3\u05d9\u05e8\u05d5\u05d2 \u05e1\u05d9\u05db\u05d5\u05df CVSS 9.5 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05db\u05d0\u05df.", "url": "https://t.me/CyberSecurityIL/9614"}, {"timestamp": "2026-10-09T07:14:57.976Z", "date_only": false, "value": "2026-10-09T07:14:57.976768Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxgghjvsqo2m", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "a3171950-a2ac-40af-9947-8819fdebad31", "content": "Citrix warns of critical NetScaler memory-overflow vulnerability CVE-2026-107406 requiring immediate patching to prevent RCE or DoS.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxgghjvsqo2m"}, {"timestamp": "2026-10-09T07:15:17.908Z", "date_only": false, "value": "2026-10-09T07:15:17.908601Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0410", "record": "NCSC-2026-0410", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-09T07:15:17.908Z", "date_only": false, "value": "2026-10-09T07:15:17.908601Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0410", "record": "NCSC-2026-0410", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-09T07:15:17.908Z", "date_only": false, "value": "2026-10-09T07:15:17.908601Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0410", "record": "NCSC-2026-0410", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-09T08:30:26Z", "date_only": false, "value": "2026-10-09T08:30:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/56074", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "fa98bb95-0d18-49b7-94a6-fc1420b74947", "content": "Citrix Urges Immediate Patching of Critical NetScaler Vulnerability\nhttps://www.securityweek.com/citrix-urges-immediate-patching-of-critical-netscaler-vulnerability/\n\nThe security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.\nThe post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability (https://www.securityweek.com/citrix-urges-immediate-patching-of-critical-netscaler-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/56074"}, {"timestamp": "2026-10-09T08:45:04.446Z", "date_only": false, "value": "2026-10-09T08:45:04.446863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rasnedev.bsky.social/post/3mxglin6rs32l", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "5006e82d-74c4-42b3-84c3-6f51ed3ffa81", "content": "Citrix warns admins to patch new NetScaler RCE flaw immediately\n\nUrgently patch Citrix NetScaler ADC and Gateway appliances against a critical remote code execution vulnerability (CVE-2026-107406).\n\nhttps://rasne.dev/news/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately", "url": "https://bsky.app/profile/rasnedev.bsky.social/post/3mxglin6rs32l"}, {"timestamp": "2026-10-09T09:00:08Z", "date_only": false, "value": "2026-10-09T09:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104759", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "e9adf493-9487-4c5a-b500-56e9a7c23123", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-107406-Poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ApexBreach\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-09 08:34:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104759"}, {"timestamp": "2026-10-09T09:00:08Z", "date_only": false, "value": "2026-10-09T09:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104759", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "718401a9-448e-409a-97ea-4bb8dea729ee", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-107406-Poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ApexBreach\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-09 08:34:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104759"}, {"timestamp": "2026-10-09T09:33:16Z", "date_only": false, "value": "2026-10-09T09:33:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10284", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "2d4f1213-04e8-4d67-ac86-0d348165536c", "content": "\u203c\ufe0f Citrix patches another critical NetScaler flaw as three separate bugs face active exploitation.\n\nCVE-2026-107406 (CVSS 9.5) could enable RCE or DoS in affected SAML IdP/SP configurations. No evidence this flaw has been exploited.\n\nRead > https://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.html", "url": "https://t.me/thehackernews/10284"}, {"timestamp": "2026-10-09T09:41:53.231Z", "date_only": false, "value": "2026-10-09T09:41:53.231112Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mxgooacdnu2u", "record": "cve-2026-107406", "field": "creation_timestamp", "uuid": "31f424c2-7047-445d-b4d2-eeb4e6386473", "content": "Citrix Patches Critical NetScaler Memory Overflow Flaw (CVSS 9.5) That Enables Remote Code Execution in SAML\u00a0Deployments\n\nCitrix patches CVE-2026-107406, a critical NetScaler memory overflow flaw rated CVSS 9.5 that\u2026\n\nhttps://thecybersecguru.com/uncategorized/citrix-netscaler-cve-2026-107406-rce/", "url": "https://bsky.app/profile/thecybersecguru.com/post/3mxgooacdnu2u"}, {"timestamp": "2026-10-09T09:55:30.054Z", "date_only": false, "value": "2026-10-09T09:55:30.054546Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxgpgmmvth27", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "664d5007-7052-4d6a-9901-c71effaaecf2", "content": "Citrix released patches for CVE-2026-107406, a high-severity memory overflow in NetScaler ADC/Gateway enabling remote code execution or denial-of-service under specific SAML configurations.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxgpgmmvth27"}, {"timestamp": "2026-10-09T10:00:27.931Z", "date_only": false, "value": "2026-10-09T10:00:27.931832Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxgppijhy72a", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "6d0ea810-2803-4d30-ad96-baae94e796ac", "content": "Citrix released patches for CVE-2026-107406, a high-severity memory overflow in NetScaler ADC/Gateway enabling remote code execution or denial-of-service under specific SAML configurations.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mxgppijhy72a"}, {"timestamp": "2026-10-09T10:02:31.084Z", "date_only": false, "value": "2026-10-09T10:02:31.084887Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxgpt6c5rt2a", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "e3662e12-5d27-4008-9741-62365d92ce25", "content": "Citrix released patches for CVE-2026-107406, a high-severity memory overflow in NetScaler ADC/Gateway enabling remote code execution or denial-of-service under specific SAML configurations.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxgpt6c5rt2a"}, {"timestamp": "2026-10-09T10:19:01.470Z", "date_only": false, "value": "2026-10-09T10:19:01.470735Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxgqqompkg2f", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "34c9fa79-0fae-4a9e-ab79-cd86a60a3755", "content": "\ud83e\udd16 CVE-2026-107406: critical memory overflow in Citrix NetScaler ADC/Gateway can enable RCE or DoS under specific SAML configurations. Citrix urges admins to patch immediately.\nhttps://www.bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxgqqompkg2f"}, {"timestamp": "2026-10-09T10:24:17.809Z", "date_only": false, "value": "2026-10-09T10:24:17.809825Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxgr23t6vr2p", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "13f9ba63-3939-4b51-9c52-422774b2b76a", "content": "Citrix NetScaler ADC/Gateway\u306b\u3001SAML\u74b0\u5883\u4e0b\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3084DoS\u306b\u7e4b\u304c\u308b\u30e1\u30e2\u30ea\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u8106\u5f31\u6027(CVE-2026-107406)\u304c\u767a\u898b\u3055\u308c\u3001\u4fee\u6b63\u30d1\u30c3\u30c1\u304c\u516c\u958b\u2026", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxgr23t6vr2p"}, {"timestamp": "2026-10-09T10:35:13.230Z", "date_only": false, "value": "2026-10-09T10:35:13.230072Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-3bfb947d-173367bb93053b65", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "d1035752-d312-43b2-824d-6b6b48b06989", "content": "Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released security updates to fix CVE-2026-107406 (CVSS score of 9.5), a critical flaw affecting NetScaler ADC and NetScaler Gateway that could allow remote code execution or denial-of-service (DoS) under certain conditions. The vulnerability is [\u2026]CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability - Security Affairs", "url": "https://poliverso.org/objects/0477a01e-3bfb947d-173367bb93053b65"}, {"timestamp": "2026-10-09T10:35:34.389Z", "date_only": false, "value": "2026-10-09T10:35:34.389255Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxgrnru7oee2", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "6746e14e-8b24-4834-9f70-58c10d580651", "content": "Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released security updates to fix CVE-2026-107406 (CVSS score of 9.5), a critical flaw affecting NetScaler ADC and NetScaler Gateway that could [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxgrnru7oee2"}, {"timestamp": "2026-10-09T10:44:22Z", "date_only": false, "value": "2026-10-09T10:44:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/258169", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "bb5ab276-2934-4d2d-9e97-21f9018268db", "content": "CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability\nhttps://ift.tt/TNWJiDX", "url": "https://t.me/ctinow/258169"}, {"timestamp": "2026-10-09T10:45:05Z", "date_only": false, "value": "2026-10-09T10:45:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/jlLmt9URi-5GtturWekb7-jLW2_1O7tRteocmbcde842hQye", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "2e2a6d8f-2b55-43a5-a618-9182199b97d5"}, {"timestamp": "2026-10-09T10:55:06.010Z", "date_only": false, "value": "2026-10-09T10:55:06.010698Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacks.gr/post/3mxgsr66lh7v5", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "a24e2f78-8362-4dc9-a4cf-2fa8b3f6bd3d", "content": "Citrix has fixed CVE-2026-107406 in NetScaler ADC and Gateway.\n\nIn specific SAML configurations, it could allow code execution or disrupt serv\u2026\n\nhttps://en.hacks.gr/i-citrix-diorthonei-sovaro-provlima-sta-netscaler-poy-mporoyse-na-epitrepsei-apomakrysmenes-entoles/\n\n#Citrix #NetScaler #CVE2026107406", "url": "https://bsky.app/profile/hacks.gr/post/3mxgsr66lh7v5"}, {"timestamp": "2026-10-09T10:55:30.282Z", "date_only": false, "value": "2026-10-09T10:55:30.282167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mxgsrvas322u", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "95c220fa-7c39-4d74-ace6-d7e608829c4c", "content": "CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability\n\nsecurityaffairs.com/200670/secur...\n\n#Cybersecurity #Vulnerability #AktiivinenHyv\u00e4ksik\u00e4ytt\u00f6", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mxgsrvas322u"}, {"timestamp": "2026-10-09T11:07:53Z", "date_only": false, "value": "2026-10-09T11:07:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/2338", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "49734b9e-9840-4140-890f-2320da0eabca", "content": "\ud83d\udd25\u0421\u0432\u0435\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Netscaler, \u0434\u0430, \u0435\u0449\u0451 \u043e\u0434\u043d\u0430\n\n\u0412\u0435\u0447\u0435\u0440\u043e\u043c \u0447\u0435\u0442\u0432\u0435\u0440\u0433\u0430, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u0441\u043a\u0443\u0447\u043d\u043e \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445, Citrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043e\u0431 \u0435\u0449\u0451 \u043e\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 NetScaler ADC \u0438 NetScaler Gateway. CVE-2026-107406 \u043f\u043e\u0442\u044f\u043d\u0443\u043b\u0430 \u043d\u0430 CVSS4B 9.5, \u043f\u0440\u0430\u0432\u0434\u0430, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u043d\u043e\u0432\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u043a SAML SP \u0438 SAML IdP, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 SAML. \u041a\u0441\u0442\u0430\u0442\u0438, \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 RCE \u043d\u0430\u043c\u0435\u043a\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u043d\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CVE-2026-88779 \u0432\u044b\u0445\u043e\u0434 \u043d\u0430 RCE \u0442\u043e\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0441\u044f.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e, \u0438 \u043b\u0443\u0447\u0448\u0435 \u0431\u044b \u0435\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043a\u043e\u0440\u0435\u0435. \u0412 \u0431\u043b\u043e\u0433\u0435 Citrix \u043f\u0440\u044f\u043c\u043e \u0441\u0441\u044b\u043b\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0443\u044e \u043f\u0430\u0447\u043a\u0443 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 (CVE 2026-88779, CVE 2026-88771 \u043f\u043e CVE 2026-88778), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u0443\u043b\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0434\u043b\u044f \u0442\u0435\u0445 CVE, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0441\u0442\u0440\u043e \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/2338"}, {"timestamp": "2026-10-09T11:12:22.967Z", "date_only": false, "value": "2026-10-09T11:12:22.967491Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxgtq3sym72r", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "71d98aeb-6214-49a6-a202-d285eb4baaf3", "content": "Citrix disclosed CVE-2026-107406, a memory overflow affecting NetScaler ADC and Gateway appliances configured as SAML IdPs or SPs. It can enable remote code execution or denial of service; Citrix says it has no evidence of exploitation and urges upgrades.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxgtq3sym72r"}, {"timestamp": "2026-10-09T11:16:08Z", "date_only": false, "value": "2026-10-09T11:16:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-024-critical-vulnerabilities-affecting-citrix-netscaler-adc-netscaler-gateway-cve-2026-88771-cve-2026-88772", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "cc581dc1-bf45-4f96-a9d7-5fa0ea6c6d88", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-024-critical-vulnerabilities-affecting-citrix-netscaler-adc-netscaler-gateway-cve-2026-88771-cve-2026-88772"}, {"timestamp": "2026-10-09T11:21:36.493Z", "date_only": false, "value": "2026-10-09T11:21:36.493538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxgualucg32x", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "57b39669-a9e6-449d-9a0b-cb0778a4e77c", "content": "Citrix is urgently begging admins to patch NetScaler flaw CVE-2026-107406. Same story different day, with remote execution ruining another weekend.\n\n#citrixpanic #patchtuesday", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxgualucg32x"}, {"timestamp": "2026-10-09T11:21:38.883Z", "date_only": false, "value": "2026-10-09T11:21:38.883441Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxguao6aqp2j", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "54c22220-d20d-402c-abf1-66be7a722fd8", "content": "Same story different day, as Citrix NetScaler treats its unfortunate users to CVE-2026-107406, enabling remote code execution and lovely denial-of-service headaches. Naturally, keeping appliances from completely falling over requires staff to immediately apply vendor patches, bec...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxguao6aqp2j"}, {"timestamp": "2026-10-09T11:41:46.611Z", "date_only": false, "value": "2026-10-09T11:41:46.611062Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/johonotodai.bsky.social/post/3mxgvem7nxj2g", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "4fc2f11b-aeef-4709-bf95-bf896d0b6a13", "content": "NetScaler CVE-2026-107406\u3001\u6df1\u523b\u5ea69.5\u306eRCE\u3002\u524d\u56de\u30d1\u30c3\u30c1\u9069\u7528\u6e08\u307f\u3067\u3082SAML IdP\u69cb\u6210\u306f\u518d\u66f4\u65b0\u304c\u5fc5\u8981", "url": "https://bsky.app/profile/johonotodai.bsky.social/post/3mxgvem7nxj2g"}, {"timestamp": "2026-10-09T11:43:39Z", "date_only": false, "value": "2026-10-09T11:43:39.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/3RzbQbxVUJmjs2_bbaihRp6m-lq3Me-4Yt_kpMNABWxskg", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "1147cc24-40e2-443d-a2c8-9466193ab31c"}, {"timestamp": "2026-10-09T12:00:07.416Z", "date_only": false, "value": "2026-10-09T12:00:07.416611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mxgwfh23al2l", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "28401bbb-97b7-479d-9530-1c40a9859702", "content": "Codex CLI 0.162.0 fixes Windows PowerShell issues; Purview DLP can exclude external email from Copilot grounding; Win11 26H2 language layouts without disabling updates; upgrade NetScaler for CVE-2026-107406. +18 more stories, 3 new members", "url": "https://bsky.app/profile/windowsforum.com/post/3mxgwfh23al2l"}, {"timestamp": "2026-10-09T12:18:40.269Z", "date_only": false, "value": "2026-10-09T12:18:40.269507Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxgxglya6p2y", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "c6a1ac36-dd85-48b0-8111-0f0156050ea4", "content": "Citrix has urged customers to patch a critical RCE vulnerability in NetScaler ADC and Gateway, tracked as CVE-2026-107406, with a CVSS score of 9.5. The flaw affects specific SAML configurations and could allow remote code execution or denial of service. Citrix recommends upgrading to versions 14.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mxgxglya6p2y"}, {"timestamp": "2026-10-09T14:05:11.353Z", "date_only": false, "value": "2026-10-09T14:05:11.353866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mxh5f3ndao26", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "247e1987-4c72-4d18-a825-2d740e5bb534", "content": "\ud83d\udd17 CVE : CVE-2026-107406", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mxh5f3ndao26"}, {"timestamp": "2026-10-09T14:40:51.199Z", "date_only": false, "value": "2026-10-09T14:40:51.199594Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117411469759804703", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "a6198f77-7fba-4824-91aa-9b32e5fbee38", "content": "CVE-2026-107406 affects NetScaler ADC and NetScaler Gateway and can lead to remote code execution (RCE) or denial of service (DoS). It carries a CVSS v4.0 score of 9.5. https://www.theregister.com/security/2026/10/09/citrix-gives-netscaler-admins-another-critical-reason-to-patch/5302212", "url": "https://infosec.exchange/users/jbhall56/statuses/117411469759804703"}, {"timestamp": "2026-10-09T14:40:58.342Z", "date_only": false, "value": "2026-10-09T14:40:58.342626Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxh7ezqses2k", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "095567c1-3adf-41e5-873d-8d29a5ef4d53", "content": "CVE-2026-107406 affects NetScaler ADC and NetScaler Gateway and can lead to remote code execution (RCE) or denial of service (DoS). It carries a CVSS v4.0 score of 9.5. www.theregister.com/security/202...", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxh7ezqses2k"}, {"timestamp": "2026-10-09T15:31:24Z", "date_only": false, "value": "2026-10-09T15:31:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X62M-6223-4VQ2", "record": "GHSA-X62M-6223-4VQ2", "field": "modified"}, {"timestamp": "2026-10-09T16:02:20.669Z", "date_only": false, "value": "2026-10-09T16:02:20.669914Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxhdwlem2j2b", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "487ff6bd-934f-4c0b-991b-97af2e3d937e", "content": "~Cybergcca~\nUpdate vulnerable NetScaler ADC and Gateway versions.\n-\nIOCs: CVE-2026-107406\n-\n#CVE-2026-107406 #Citrix #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxhdwlem2j2b"}, {"timestamp": "2026-10-09T16:03:59Z", "date_only": false, "value": "2026-10-09T16:03:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8699", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "b8b81034-aa72-444c-b51e-7e524fa3107f", "content": "\u0414\u043e\u0431\u0438\u0432\u0430\u0435\u043c \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u043e\u0439 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0443\u0433\u0440\u043e\u0437, \u0441\u0440\u0435\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043c\u043e\u0436\u0435\u043c \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:\n\n1. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f FakeGit \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430\u0441\u044c 4 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u0437\u0430\u0440\u0430\u0437\u0438\u0432 17 610 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 GitHub \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e SmartLoader, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\u00a0\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 700 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c.\n\n\u0412\u0441\u0435\u0433\u043e \u0437\u0430 34 \u0447\u0430\u0441\u0430 FakeGit \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u043b \u0431\u043e\u043b\u0435\u0435 13 000 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432, \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0443\u0432 \u043f\u0438\u043a\u0430 \u0432 2999 \u0437\u0430 \u0447\u0430\u0441. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Apiiro.\n\n2. Citrix \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler ADC \u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 NetScaler Gateway.\n\nCVE-2026-107406 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438\u043b\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f DoS, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044f\u043c.\n\n\u0414\u043b\u044f \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler ADC \u0438 NetScaler Gateway \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0438\u0445 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (IdP) \u0438\u043b\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433 (SP) \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044f\u0437\u044b\u043a\u0430 \u0440\u0430\u0437\u043c\u0435\u0442\u043a\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (SAML).\n\nShadowserver \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 21 000 IP \u0441 NetScaler \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u0435\u0435 1500 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0448\u043b\u044e\u0437\u043e\u0432 \u0438 \u043f\u043e\u0447\u0442\u0438 20 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 NetScaler ADC). \n\nCitrix \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-107406 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0448\u0438\u0440\u043e\u0442\u0443 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0442\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n3. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SonicWall SMA1000 (CVE-2026-102255), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0442\u0440\u0438 \u0434\u043d\u044f \u043d\u0430\u0437\u0430\u0434.\n\n\u0425\u043e\u0442\u044f SonicWall \u0435\u0449\u0435 \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0435\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0432 Previdian \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0441\u0435\u0442\u044c \u0438\u0445 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u043e\u0432 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 CVE-2026-102255.\n\n4. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GitGuardian, \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 31 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043f\u043e 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 GhostAction \u043f\u043e \u043a\u0440\u0430\u0436\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e GitHub Actions \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0441\u0432\u043e\u0439 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u043d\u0430 772 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f (\u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 373 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c), \u043f\u043e\u0445\u0438\u0442\u0438\u0432 2577 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Azure, AWS \u0438 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 2025 \u0433\u043e\u0434\u0430, \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 GitGuardian \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u043b\u0430\u0441\u044c.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 CVE-2026-47483, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 DCGM Exporter \u043e\u0442 Nvidia.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u043c\u0430\u0440\u0442 \u043f\u043e \u043c\u0430\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u043a\u043e\u043b\u043e 2100 \u0445\u043e\u0441\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0435\u0440\u0443 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 12 000 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432.\n\n6. \u0412\u0435\u0440\u0441\u0438\u044f 0.5.144 Tensorlake, SDK npm \u0434\u043b\u044f \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0418\u0418 Tensorlake, \u0431\u044b\u043b\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 \u0447\u0435\u0440\u0432\u044f, \u043a\u0440\u0430\u0434\u0443\u0449\u0435\u0433\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0447\u0442\u043e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u043e\u0439 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0442\u0438\u043f\u0430 ChainDrop/Shai-Hulud.\n\nSocket \u0438 Sonatype \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 npm, GitHub, AWS, Kubernetes \u0438 Vault, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0418\u0418. \u041c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438 \u043f\u0435\u0440\u0435\u0438\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u0430.\n\n7. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Positive Technologies \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u043c ICS-\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0435 S7Flip, \u043f\u043e\u043f\u0443\u0442\u043d\u043e \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043e\u043d\u0438 \u043d\u0430\u0448\u043b\u0438 \u043d\u0430 MalwareBazaar.\n\n8. Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u044e\u0436\u0438\u043d\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443, \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, DoS \u0438 RCE.", "url": "https://t.me/true_secator/8699"}, {"timestamp": "2026-10-09T17:00:20.861Z", "date_only": false, "value": "2026-10-09T17:00:20.861506Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pidgeonai.bsky.social/post/3mxhh6c5fnn2r", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "6580c1ef-cb1a-4129-95dc-3a3f84adc2ea", "content": "Citrix is urging admins to patch a critical NetScaler RCE flaw (CVE-2026-107406) with a 9.5 severity score. A memory buffer overflow could let attackers execute code or crash systems. Check your SAML configs now. #Infosec #Cyber #Security #Patch", "url": "https://bsky.app/profile/pidgeonai.bsky.social/post/3mxhh6c5fnn2r"}, {"timestamp": "2026-10-09T22:39:35.570Z", "date_only": false, "value": "2026-10-09T22:39:35.570580Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117413352230728558", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "98240f30-db99-438c-a865-f25d1e9ce090", "content": "\u26a0\ufe0f We have just added an important vulnerability affecting Citrix ADC and Gateway (CVE-2026-107406) https://vuldb.com/vuln/415665", "url": "https://infosec.exchange/users/vuldb/statuses/117413352230728558"}, {"timestamp": "2026-10-09T23:00:53Z", "date_only": false, "value": "2026-10-09T23:00:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/44853", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "984716f9-a0b6-43bb-a57e-79d94ed87f1a", "content": "Citrix Urges Immediate Patching of Critical NetScaler Vulnerability\n\nThe security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.\nThe post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/citrix-urges-immediate-patching-of-critical-netscaler-vulnerability/", "url": "https://t.me/VulnerabilityNews/44853"}, {"timestamp": "2026-10-09T23:49:52.859Z", "date_only": false, "value": "2026-10-09T23:49:52.859523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxi62me4462u", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "7a40bed3-4833-4201-b8a1-c7552d436216", "content": "NetScaler CVE-2026-107406: critical memory overflow, RCE when configured as SAML IdP or SP. Patch to 14.1-73.46, 13.1-64.29 or 13.1-37.283 FIPS/NDcPP. No known exploitation yet. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxi62me4462u"}, {"timestamp": "2026-10-10T03:55:21.152Z", "date_only": false, "value": "2026-10-10T03:55:21.152Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-107406", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-10T03:55:21.152Z", "date_only": false, "value": "2026-10-10T03:55:21.152Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-107406", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-10T04:18:09.503Z", "date_only": false, "value": "2026-10-10T04:18:09.503", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-107406", "record": "FKIE_CVE-2026-107406", "field": "lastModified"}, {"timestamp": "2026-10-10T06:48:27.331Z", "date_only": false, "value": "2026-10-10T06:48:27.331956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxivh2meaq2s", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "4ec06afa-455b-468f-b2f4-f898a5f6d364", "content": "Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway memory overflow that could enable remote code execution or denial of service in deployments configured as SAML identity or service providers. No in-the-wild exploitation was reported.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxivh2meaq2s"}, {"timestamp": "2026-10-10T07:03:55.470Z", "date_only": false, "value": "2026-10-10T07:03:55.470183Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxiwcq6q6q2w", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "0f29810a-bff5-4ad8-bae0-027320d21244", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 3\n\u2022 IBM DataPower Gateway (CVE-2026-14502), CVSS 9.8 (Cyberveille Esant\u00e9)\n\u2022 Citrix NetScaler ADC et NetScaler Gateway (CVE-2026-107406), CVSS 9.5 (Cyberveille Esant\u00e9)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxiwcq6q6q2w"}, {"timestamp": "2026-10-10T07:42:23.001Z", "date_only": false, "value": "2026-10-10T07:42:23.001839Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxiyhiupch2b", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "19149f3d-2fdb-4008-a1c3-fedb402ac6c4", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 78 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-102255: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-102255: 9 interactions\nCVE-2026-107181: 4 interactions\nCVE-2026-107406: 4 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxiyhiupch2b"}, {"timestamp": "2026-10-10T08:51:56.931Z", "date_only": false, "value": "2026-10-10T08:51:56.931268Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxj4dv3e732c", "record": "cve-2026-107406", "field": "creation_timestamp", "uuid": "97083273-30b1-4c50-992e-cb6200b4619b", "content": "\ud83d\udcf0 Citrix Peringatkan Kerentanan Kritis NetScaler CVE-2026-107406, Administrator Diminta Segera Update\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/10/citrix-netscaler-cve-2026-107406-kerentanan-kritis-rce/\n\n#citrix #cybersecurity #keamananSiber #kerentanan #netscaler #ransomw", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxj4dv3e732c"}, {"timestamp": "2026-10-10T08:59:39.337Z", "date_only": false, "value": "2026-10-10T08:59:39.337740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxj4roim4f2g", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "2bfb3089-6782-4789-9fef-2bab06c6e34a", "content": "Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments\n\nCitrix has released patches for CVE-2026-107406, a critical (CVSS 9.5) memory overflow vulnerability in NetScaler ADC and NetScaler Gatew... https://threatintel.cc/2026/10/10/citrix-patches-critical-netscaler-flaw.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxj4roim4f2g"}, {"timestamp": "2026-10-10T08:59:40.437Z", "date_only": false, "value": "2026-10-10T08:59:40.437732Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117415790385712130", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "ac03431d-d17b-440f-8b83-692ec1395e1d", "content": "Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments\nCitrix has released patches for CVE-2026-107406, a critical (CVSS 9.5) memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that could enable remote code execution or denial-of-service in SAML deployments. The flaw is distinct from the NetScaler zero-day Citrix warned about earlier this week. Administrators are urged to patch immediately. https://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.html", "url": "https://infosec.exchange/users/edwardk/statuses/117415790385712130"}, {"timestamp": "2026-10-10T12:03:27.448Z", "date_only": false, "value": "2026-10-10T12:03:27.448315Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxjh2d4eq224", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "017ae39a-513c-4a19-a709-4a5a76c38606", "content": "CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability\n\nCitrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released security updates to fix CVE-2026-10740\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxjh2d4eq224"}, {"timestamp": "2026-10-10T18:45:31.631Z", "date_only": false, "value": "2026-10-10T18:45:31.631602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mxk5jcdgdv22", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "1f5820da-c7d5-423c-9dc0-3a3cd172f3e4", "content": "NetScaler admins get more patch homework \ud83d\ude2c\n\nCitrix reports a new critical vulnerability, CVE-2026-107406, with a CVSS v4.0 score of 9.5, affecting NetScaler ADC and Gateway via SAML.", "url": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mxk5jcdgdv22"}, {"timestamp": "2026-10-11T07:47:07.743Z", "date_only": false, "value": "2026-10-11T07:47:07.743791Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxlj6vw3px2b", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "e474c25f-d1d2-44a1-bf9f-a9b902cc0948", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 78 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-102255: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-75650: 7 interactions\nCVE-2026-107406: 6 interactions\nCVE-2026-104398: 4 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxlj6vw3px2b"}, {"timestamp": "2026-10-11T09:01:33.073Z", "date_only": false, "value": "2026-10-11T09:01:33.073828Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mxlndybyp422", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "0bdf0c15-23cf-49f6-8f95-d0c17cf99b04", "content": "Citrix\u3001NetScaler \u306e SAML \u95a2\u9023\u306e\u91cd\u5927 RCE \u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nCitrix \u304c CVE-2026-107406\uff08\u30e1\u30e2\u30ea\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\uff09\u3092\u4fee\u6b63\u3002SAML \u8a8d\u8a3c\u3092\u4f7f\u7528\u3059\u308b NetScaler \u74b0\u5883\u3067 RCE \u307e\u305f\u306f DoS \u304c\u53ef\u80fd\u306a\u8106\u5f31\u6027\u3002\u76f4\u3061\u306b\u30d1\u30c3\u30c1\u9069\u7528\u304c\u5fc5\u8981\u3002\n\n#DDoS #CVE #\u8106\u5f31\u6027", "url": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mxlndybyp422"}, {"timestamp": "2026-10-11T11:37:10.405Z", "date_only": false, "value": "2026-10-11T11:37:10.405790Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/secpoint.bsky.social/post/3mxlw27grws22", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "c94c0fef-a07d-40e8-8257-5a099391c64a", "content": "\ud83d\udea8 Critical Citrix NetScaler Vulnerability Disclosed\n\nCitrix has disclosed CVE-2026-107406, a critical vulnerability affecting NetScaler ADC and NetScaler Gateway, with a CVSS 4.0 score of 9.5.\n\n#SecPoint #Citrix #NetScaler #CyberSecurity #VulnerabilityManagement", "url": "https://bsky.app/profile/secpoint.bsky.social/post/3mxlw27grws22"}, {"timestamp": "2026-10-11T18:15:04.094Z", "date_only": false, "value": "2026-10-11T18:15:04.094825Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxmmbq5pxc2i", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "287a3d09-f2c3-4828-8f0d-441cbbb83952", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-106610 \u00b7 4 people\n2. CVE-2026-107406 \u00b7 4 people\n3. CVE-2026-78533 \u00b7 4 people\n4. CVE-2026-78535 \u00b7 4 people\n5. CVE-2026-81797 \u00b7 4 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxmmbq5pxc2i"}, {"timestamp": "2026-10-11T18:15:05.836Z", "date_only": false, "value": "2026-10-11T18:15:05.836701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxmmbqayh22i", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "c9f80183-5a81-430c-8b86-dc42b983bff6", "content": "2. CVE-2026-107406 \u00b7 4 people\n\ud83d\udfe5 Critical 9.5 \u00b7 NetScaler ADC\n\nMemory overflow vulnerability leading to Remote Code Execution or Denial of Service", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxmmbqayh22i"}, {"timestamp": "2026-10-12T04:31:58.670Z", "date_only": false, "value": "2026-10-12T04:31:58.670043Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mxnoquzcuw2q", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "ecccecbc-1cc6-4ae0-b043-8cc31c3a637b", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-107406) NetScaler ADC and Gateway Remote Code Execution via SAML\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "url": "https://bsky.app/profile/opsmatters.com/post/3mxnoquzcuw2q"}, {"timestamp": "2026-10-12T13:55:06.030Z", "date_only": false, "value": "2026-10-12T13:55:06.030717Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117428276673164969", "record": "cve-2026-107406", "field": "creation_timestamp", "uuid": "afc8bd71-46e2-4739-b4a6-862598050b7a", "content": "\ud83d\udcf0 New Critical RCE Flaw Found in Patched Citrix NetScaler Appliances\nCitrix issues another emergency patch for a critical RCE flaw (CVE-2026-107406, CVSS 9.5) in NetScaler ADC & Gateway. The bug affects even recently patched builds. Upgrade immediately if your appliance is a SAML IdP. #Citrix #NetScaler #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-cve-2026-107406-found-in-patched-citrix-netscaler-appliances/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117428276673164969"}, {"timestamp": "2026-10-12T13:55:28.277Z", "date_only": false, "value": "2026-10-12T13:55:28.277633Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mxooahrxhv2b", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "31caace0-d582-4ec5-a197-ba487ea50cfb", "content": "Citrix issues another emergency patch for a critical RCE flaw (CVE-2026-107406, CVSS 9.5) in NetScaler ADC & Gateway. The bug affects even recently patched builds. Upgrade immediately if your appliance is a SAML IdP. #Citrix #NetScaler #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mxooahrxhv2b"}, {"timestamp": "2026-10-12T20:32:01.483Z", "date_only": false, "value": "2026-10-12T20:32:01.483735Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybernewsdaily.bsky.social/post/3mxpefezwov2p", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "bebdbbe9-cb66-4223-bba3-c8aaf0e7ab7a", "content": "Citrix NetScaler customers must patch CVE-2026-107406. IonQ agrees to acquire Elisity for up to $1.3bn to bolster sec\n\nSponsor this channel today. https://www.ProNetGrowth.com/cyber/?utm_source=bluesky&utm_medium=post&utm_campaign=news-cybersecurity&utm_content=cybersecurity\n\n#CyberSecurity #InfoSec", "url": "https://bsky.app/profile/cybernewsdaily.bsky.social/post/3mxpefezwov2p"}, {"timestamp": "2026-10-13T08:22:40.836Z", "date_only": false, "value": "2026-10-13T08:22:40.836858Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxqm4d56tu26", "record": "CVE-2026-107406", "field": "creation_timestamp", "uuid": "84b4c088-b28e-4628-82dc-5492e54bb88b", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 79 interactions\nCVE-2026-102255: 21 interactions\nCVE-2026-107406: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-97229: 14 interactions\nCVE-2026-92392: 7 interactions\nCVE-2025-41450: 5 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxqm4d56tu26"}]}