{"vulnerability": "CVE-2026-107406", "sightings": [{"uuid": "2c80067f-fc12-4eaa-8541-09228a7dff2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107406", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117407337579547632", "content": "I'm tired, boss.\nA new #Citrix CVE affecting SAML IdP/SP-configured devices is out.\nhttps://ifin.network/t/cve-2026-107406-somehow-another-citrix-netscaler-saml-vulnerability/891\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-10-08T21:10:10.924169Z"}, {"uuid": "54282751-d509-44a0-8e91-1bf439226005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/francisck.com/post/3mxfffdzhqs2q", "content": "A *new* SAML RCE for Citrix is out. \n\nThe new vulnerability (CVE-2026-107406) is only applicable if you're running your NetScaler deployment as a SAML *Identity Provider*. \n\nIf you\u2019re using Citrix as a service provider &  patched last weekend you\u2019re ok.\n\nSurely the madness will stop someday. Right?", "creation_timestamp": "2026-10-08T21:23:10.634598Z"}, {"uuid": "b9f46f99-d50a-4fec-808f-615fe727eed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117407564606000783", "content": "There\u2019s yet another Citrix Netscaler vuln (new patch today) which allows unauth RCE - CVE-2026-107406 \nSame attack surface (SAML) as two of the other vulns exploited in the wild during the past month.", "creation_timestamp": "2026-10-08T22:08:11.604038Z"}, {"uuid": "cca75fba-4d2f-4190-8696-142638bc5cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mxflu2mfkc25", "content": "#Murmeltier-Tag Kritische #Schwachstelle CVE-2026-107406 (CVSS 9.4) in #Citrix NetScaler ADC / Citrix NetScaler Gateway (8.10.2026) wenn diese Appliances als SAML-SP oder SAML-IdP konfiguriert sind. Also patchen. \n\nborncity.com/blog/2026/10...", "creation_timestamp": "2026-10-08T23:18:46.380169Z"}, {"uuid": "68941bd8-11c9-4e9d-a0ed-a34dbec40da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107406", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117407844854479383", "content": "#Murmeltier-Tag Kritische #Schwachstelle CVE-2026-107406 (CVSS 9.4) in #Citrix NetScaler ADC / Citrix NetScaler Gateway (8.10.2026) wenn diese Appliances als SAML-SP oder SAML-IdP konfiguriert sind. Also patchen. \nhttps://borncity.com/blog/2026/10/09/kritische-schwachstelle-cve-2026-107406-in-citrix-netscaler-adc-citrix-netscaler-gateway-8-10-2026/", "creation_timestamp": "2026-10-08T23:19:00.866452Z"}, {"uuid": "7bbef472-5bf7-4262-b455-6b457fe8d209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfnm2hmey2h", "content": "CVE-2026-107406 - adc\nCertain versions of NetScaler ADC and NetScaler Gateway that act as SAML identity or service providers may allow a memory overflow, which could let an attacker stop the device or run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adc #netscaler #CVE #infosec", "creation_timestamp": "2026-10-08T23:50:04.992289Z"}, {"uuid": "954a820d-1713-409c-adad-8c2d3ac4e912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfomwxhnq2l", "content": "\ud83d\udea8 CVE-2026-107406 \u2014 CVSS 9.5 CRITICAL\n\nMemory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetSca...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107406\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:08:29.046946Z"}, {"uuid": "d66ed280-36db-452b-826d-666012c4a21c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxftovz6ax2t", "content": "Critical Citrix NetScaler vulnerability CVE-2026-107406 (CVSS 9.5) can lead to RCE on SAML-configured ADC and Gateway. Upgrade now.\n\n#Citrix #NetScaler #NetScalerGateway #CVE2026107406 #SAML #RCE #PatchNow #Vulnerability", "creation_timestamp": "2026-10-09T01:39:04.595190Z"}, {"uuid": "bd009496-dfcc-4098-9dca-ccd27ab8236b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxfwlskgtd2m", "content": "Kwetsbaarheid in NetScaler kan leiden tot verreikende beveiligingsrisico's\n\nEen kritieke beveiligingskwetsbaarheid, met CVE-ID CVE-2026-107406, is ontdekt in NetScaler ADC en NetScaler Gateway. Deze kwetsbaarheid, die wordt geclassificeerd als CWE-119, kan leiden tot uitvoering van ext...", "creation_timestamp": "2026-10-09T02:31:01.084581Z"}, {"uuid": "c94e198f-2460-40db-9688-5036f7eb1b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3okftkumik35k", "content": "Critical NetScaler RCE Vulnerability CVE-2026-107406", "creation_timestamp": "2026-10-09T03:01:18.734037Z"}, {"uuid": "ac13f423-cbba-4535-8bc4-4ee0124dbfd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/pingoru.bsky.social/post/3mxg77mbayy2v", "content": "\u26a0\ufe0f Trimble Transportation is reporting a Incident since 05:00 UTC\n\n\"NetScaler Security Upgrades (CVE-2026-107406)\"\n\nLive timeline \u2192 https://pingoru.io/providers/trimble-transportation/incidents/12189473\n\n#TrimbleTransportation #TrimbleTransportationDown", "creation_timestamp": "2026-10-09T05:05:15.333364Z"}, {"uuid": "a3171950-a2ac-40af-9947-8819fdebad31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxgghjvsqo2m", "content": "Citrix warns of critical NetScaler memory-overflow vulnerability CVE-2026-107406 requiring immediate patching to prevent RCE or DoS.\n", "creation_timestamp": "2026-10-09T07:14:57.976768Z"}, {"uuid": "5006e82d-74c4-42b3-84c3-6f51ed3ffa81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/rasnedev.bsky.social/post/3mxglin6rs32l", "content": "Citrix warns admins to patch new NetScaler RCE flaw immediately\n\nUrgently patch Citrix NetScaler ADC and Gateway appliances against a critical remote code execution vulnerability (CVE-2026-107406).\n\nhttps://rasne.dev/news/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately", "creation_timestamp": "2026-10-09T08:45:04.446863Z"}, {"uuid": "9758be62-af51-4f52-8fd9-4ac766b58723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://t.me/GithubRedTeam/104740", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a citrix-netscaler-rce-cve-2026-107406\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a techupdate24\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-09 04:38:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-09T05:00:07.000000Z"}, {"uuid": "31f424c2-7047-445d-b4d2-eeb4e6386473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107406", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mxgooacdnu2u", "content": "Citrix Patches Critical NetScaler Memory Overflow Flaw (CVSS 9.5) That Enables Remote Code Execution in SAML\u00a0Deployments\n\nCitrix patches CVE-2026-107406, a critical NetScaler memory overflow flaw rated CVSS 9.5 that\u2026\n\nhttps://thecybersecguru.com/uncategorized/citrix-netscaler-cve-2026-107406-rce/", "creation_timestamp": "2026-10-09T09:41:53.231112Z"}, {"uuid": "664d5007-7052-4d6a-9901-c71effaaecf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxgpgmmvth27", "content": "Citrix released patches for CVE-2026-107406, a high-severity memory overflow in NetScaler ADC/Gateway enabling remote code execution or denial-of-service under specific SAML configurations.\n", "creation_timestamp": "2026-10-09T09:55:30.054546Z"}, {"uuid": "fa98bb95-0d18-49b7-94a6-fc1420b74947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://t.me/information_security_channel/56074", "content": "Citrix Urges Immediate Patching of Critical NetScaler Vulnerability\nhttps://www.securityweek.com/citrix-urges-immediate-patching-of-critical-netscaler-vulnerability/\n\nThe security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.\nThe post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability (https://www.securityweek.com/citrix-urges-immediate-patching-of-critical-netscaler-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-10-09T08:30:26.000000Z"}, {"uuid": "fbfb6304-a1fe-4819-93d6-7e8a33213806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://t.me/CyberSecurityIL/9614", "content": "\u26d4\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-NetScaler ADC \u05d5-NetScaler Gateway.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2026-107406 \u05d3\u05d9\u05e8\u05d5\u05d2 \u05e1\u05d9\u05db\u05d5\u05df CVSS 9.5 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05db\u05d0\u05df.", "creation_timestamp": "2026-10-09T07:13:29.000000Z"}, {"uuid": "6d0ea810-2803-4d30-ad96-baae94e796ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxgppijhy72a", "content": "Citrix released patches for CVE-2026-107406, a high-severity memory overflow in NetScaler ADC/Gateway enabling remote code execution or denial-of-service under specific SAML configurations.\n", "creation_timestamp": "2026-10-09T10:00:27.931832Z"}, {"uuid": "e3662e12-5d27-4008-9741-62365d92ce25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxgpt6c5rt2a", "content": "Citrix released patches for CVE-2026-107406, a high-severity memory overflow in NetScaler ADC/Gateway enabling remote code execution or denial-of-service under specific SAML configurations.\n", "creation_timestamp": "2026-10-09T10:02:31.084887Z"}, {"uuid": "34c9fa79-0fae-4a9e-ab79-cd86a60a3755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxgqqompkg2f", "content": "\ud83e\udd16 CVE-2026-107406: critical memory overflow in Citrix NetScaler ADC/Gateway can enable RCE or DoS under specific SAML configurations. Citrix urges admins to patch immediately.\nhttps://www.bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately/", "creation_timestamp": "2026-10-09T10:19:01.470735Z"}, {"uuid": "13f9ba63-3939-4b51-9c52-422774b2b76a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxgr23t6vr2p", "content": "Citrix NetScaler ADC/Gateway\u306b\u3001SAML\u74b0\u5883\u4e0b\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3084DoS\u306b\u7e4b\u304c\u308b\u30e1\u30e2\u30ea\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u8106\u5f31\u6027(CVE-2026-107406)\u304c\u767a\u898b\u3055\u308c\u3001\u4fee\u6b63\u30d1\u30c3\u30c1\u304c\u516c\u958b\u2026", "creation_timestamp": "2026-10-09T10:24:17.809825Z"}, {"uuid": "d1035752-d312-43b2-824d-6b6b48b06989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-3bfb947d-173367bb93053b65", "content": "Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released security updates to fix CVE-2026-107406 (CVSS score of 9.5), a critical flaw affecting NetScaler ADC and NetScaler Gateway that could allow remote code execution or denial-of-service (DoS) under certain conditions. The vulnerability is [\u2026]CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability - Security Affairs", "creation_timestamp": "2026-10-09T10:35:13.230072Z"}, {"uuid": "6746e14e-8b24-4834-9f70-58c10d580651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxgrnru7oee2", "content": "Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released security updates to fix CVE-2026-107406 (CVSS score of 9.5), a critical flaw affecting NetScaler ADC and NetScaler Gateway that could [\u2026]", "creation_timestamp": "2026-10-09T10:35:34.389255Z"}, {"uuid": "a24e2f78-8362-4dc9-a4cf-2fa8b3f6bd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/hacks.gr/post/3mxgsr66lh7v5", "content": "Citrix has fixed CVE-2026-107406 in NetScaler ADC and Gateway.\n\nIn specific SAML configurations, it could allow code execution or disrupt serv\u2026\n\nhttps://en.hacks.gr/i-citrix-diorthonei-sovaro-provlima-sta-netscaler-poy-mporoyse-na-epitrepsei-apomakrysmenes-entoles/\n\n#Citrix #NetScaler #CVE2026107406", "creation_timestamp": "2026-10-09T10:55:06.010698Z"}, {"uuid": "95c220fa-7c39-4d74-ace6-d7e608829c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mxgsrvas322u", "content": "CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability\n\nsecurityaffairs.com/200670/secur...\n\n#Cybersecurity #Vulnerability #AktiivinenHyv\u00e4ksik\u00e4ytt\u00f6", "creation_timestamp": "2026-10-09T10:55:30.282167Z"}, {"uuid": "2d4f1213-04e8-4d67-ac86-0d348165536c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://t.me/thehackernews/10284", "content": "\u203c\ufe0f Citrix patches another critical NetScaler flaw as three separate bugs face active exploitation.\n\nCVE-2026-107406 (CVSS 9.5) could enable RCE or DoS in affected SAML IdP/SP configurations. No evidence this flaw has been exploited.\n\nRead > https://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.html", "creation_timestamp": "2026-10-09T09:33:16.000000Z"}, {"uuid": "71d98aeb-6214-49a6-a202-d285eb4baaf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxgtq3sym72r", "content": "Citrix disclosed CVE-2026-107406, a memory overflow affecting NetScaler ADC and Gateway appliances configured as SAML IdPs or SPs. It can enable remote code execution or denial of service; Citrix says it has no evidence of exploitation and urges upgrades.", "creation_timestamp": "2026-10-09T11:12:22.967491Z"}, {"uuid": "57b39669-a9e6-449d-9a0b-cb0778a4e77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxgualucg32x", "content": "Citrix is urgently begging admins to patch NetScaler flaw CVE-2026-107406. Same story different day, with remote execution ruining another weekend.\n\n#citrixpanic #patchtuesday", "creation_timestamp": "2026-10-09T11:21:36.493538Z"}, {"uuid": "54c22220-d20d-402c-abf1-66be7a722fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxguao6aqp2j", "content": "Same story different day, as Citrix NetScaler treats its unfortunate users to CVE-2026-107406, enabling remote code execution and lovely denial-of-service headaches. Naturally, keeping appliances from completely falling over requires staff to immediately apply vendor patches, bec...\n\nRead full story", "creation_timestamp": "2026-10-09T11:21:38.883441Z"}, {"uuid": "4fc2f11b-aeef-4709-bf95-bf896d0b6a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/johonotodai.bsky.social/post/3mxgvem7nxj2g", "content": "NetScaler CVE-2026-107406\u3001\u6df1\u523b\u5ea69.5\u306eRCE\u3002\u524d\u56de\u30d1\u30c3\u30c1\u9069\u7528\u6e08\u307f\u3067\u3082SAML IdP\u69cb\u6210\u306f\u518d\u66f4\u65b0\u304c\u5fc5\u8981", "creation_timestamp": "2026-10-09T11:41:46.611062Z"}, {"uuid": "28401bbb-97b7-479d-9530-1c40a9859702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mxgwfh23al2l", "content": "Codex CLI 0.162.0 fixes Windows PowerShell issues; Purview DLP can exclude external email from Copilot grounding; Win11 26H2 language layouts without disabling updates; upgrade NetScaler for CVE-2026-107406. +18 more stories, 3 new members", "creation_timestamp": "2026-10-09T12:00:07.416611Z"}, {"uuid": "bb5ab276-2934-4d2d-9e97-21f9018268db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://t.me/ctinow/258169", "content": "CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability\nhttps://ift.tt/TNWJiDX", "creation_timestamp": "2026-10-09T10:44:22.000000Z"}, {"uuid": "718401a9-448e-409a-97ea-4bb8dea729ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://t.me/GithubRedTeam/104759", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-107406-Poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ApexBreach\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-09 08:34:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-09T09:00:08.000000Z"}, {"uuid": "49734b9e-9840-4140-890f-2320da0eabca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://t.me/kasperskyb2b/2338", "content": "\ud83d\udd25\u0421\u0432\u0435\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Netscaler, \u0434\u0430, \u0435\u0449\u0451 \u043e\u0434\u043d\u0430\n\n\u0412\u0435\u0447\u0435\u0440\u043e\u043c \u0447\u0435\u0442\u0432\u0435\u0440\u0433\u0430, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0431\u044b\u043b\u043e \u0441\u043a\u0443\u0447\u043d\u043e \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445, Citrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043e\u0431 \u0435\u0449\u0451 \u043e\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 NetScaler ADC \u0438 NetScaler Gateway. CVE-2026-107406 \u043f\u043e\u0442\u044f\u043d\u0443\u043b\u0430 \u043d\u0430 CVSS4B 9.5, \u043f\u0440\u0430\u0432\u0434\u0430, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u043d\u043e\u0432\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u043a SAML SP \u0438 SAML IdP, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 SAML. \u041a\u0441\u0442\u0430\u0442\u0438, \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 RCE \u043d\u0430\u043c\u0435\u043a\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u043d\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CVE-2026-88779 \u0432\u044b\u0445\u043e\u0434 \u043d\u0430 RCE \u0442\u043e\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0441\u044f.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e, \u0438 \u043b\u0443\u0447\u0448\u0435 \u0431\u044b \u0435\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043a\u043e\u0440\u0435\u0435. \u0412 \u0431\u043b\u043e\u0433\u0435 Citrix \u043f\u0440\u044f\u043c\u043e \u0441\u0441\u044b\u043b\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0443\u044e \u043f\u0430\u0447\u043a\u0443 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 (CVE 2026-88779, CVE 2026-88771 \u043f\u043e CVE 2026-88778), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u0443\u043b\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0434\u043b\u044f \u0442\u0435\u0445 CVE, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0441\u0442\u0440\u043e \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2026-10-09T11:07:53.000000Z"}, {"uuid": "2e2a6d8f-2b55-43a5-a618-9182199b97d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "Telegram/jlLmt9URi-5GtturWekb7-jLW2_1O7tRteocmbcde842hQye", "content": "", "creation_timestamp": "2026-10-09T10:45:05.000000Z"}, {"uuid": "488f57ab-cb7e-4f0e-a308-c06ce67e8250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/10/weitere-kritische-sicherheitslucke-in-citrix-netscaler-adc-und-netscaler-gateway-updates-verfugbar", "content": "", "creation_timestamp": "2026-10-09T01:54:39.000000Z"}, {"uuid": "c6a1ac36-dd85-48b0-8111-0f0156050ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxgxglya6p2y", "content": "Citrix has urged customers to patch a critical RCE vulnerability in NetScaler ADC and Gateway, tracked as CVE-2026-107406, with a CVSS score of 9.5. The flaw affects specific SAML configurations and could allow remote code execution or denial of service. Citrix recommends upgrading to versions 14.", "creation_timestamp": "2026-10-09T12:18:40.269507Z"}, {"uuid": "e9adf493-9487-4c5a-b500-56e9a7c23123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104759", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-107406-Poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ApexBreach\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-09 08:34:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-09T09:00:08.000000Z"}, {"uuid": "247e1987-4c72-4d18-a825-2d740e5bb534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mxh5f3ndao26", "content": "\ud83d\udd17 CVE : CVE-2026-107406", "creation_timestamp": "2026-10-09T14:05:11.353866Z"}, {"uuid": "a6198f77-7fba-4824-91aa-9b32e5fbee38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117411469759804703", "content": "CVE-2026-107406 affects NetScaler ADC and NetScaler Gateway and can lead to remote code execution (RCE) or denial of service (DoS). It carries a CVSS v4.0 score of 9.5. https://www.theregister.com/security/2026/10/09/citrix-gives-netscaler-admins-another-critical-reason-to-patch/5302212", "creation_timestamp": "2026-10-09T14:40:51.199594Z"}, {"uuid": "095567c1-3adf-41e5-873d-8d29a5ef4d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxh7ezqses2k", "content": "CVE-2026-107406 affects NetScaler ADC and NetScaler Gateway and can lead to remote code execution (RCE) or denial of service (DoS). It carries a CVSS v4.0 score of 9.5. www.theregister.com/security/202...", "creation_timestamp": "2026-10-09T14:40:58.342626Z"}, {"uuid": "1147cc24-40e2-443d-a2c8-9466193ab31c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "Telegram/3RzbQbxVUJmjs2_bbaihRp6m-lq3Me-4Yt_kpMNABWxskg", "content": "", "creation_timestamp": "2026-10-09T11:43:39.000000Z"}, {"uuid": "487ff6bd-934f-4c0b-991b-97af2e3d937e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxhdwlem2j2b", "content": "~Cybergcca~\nUpdate vulnerable NetScaler ADC and Gateway versions.\n-\nIOCs: CVE-2026-107406\n-\n#CVE-2026-107406 #Citrix #ThreatIntel", "creation_timestamp": "2026-10-09T16:02:20.669914Z"}, {"uuid": "58a24d45-6d12-4f73-b403-1a1411caf69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-1023", "content": "", "creation_timestamp": "2026-10-09T06:31:29.000000Z"}, {"uuid": "6580c1ef-cb1a-4129-95dc-3a3f84adc2ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/pidgeonai.bsky.social/post/3mxhh6c5fnn2r", "content": "Citrix is urging admins to patch a critical NetScaler RCE flaw (CVE-2026-107406) with a 9.5 severity score. A memory buffer overflow could let attackers execute code or crash systems. Check your SAML configs now. #Infosec #Cyber #Security #Patch", "creation_timestamp": "2026-10-09T17:00:20.861506Z"}, {"uuid": "cc581dc1-bf45-4f96-a9d7-5fa0ea6c6d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-024-critical-vulnerabilities-affecting-citrix-netscaler-adc-netscaler-gateway-cve-2026-88771-cve-2026-88772", "content": "", "creation_timestamp": "2026-10-09T11:16:08.000000Z"}]}