Back to list

2026-003 Multiple Vulnerabilities in Citrix NetScaler and Citrix ADC — CERT-EU-SA2026-003

CERT-EU · CERT-EU · CERT-EU-SA2026-003

ID
CERT-EU-SA2026-003
Date
Activity
Source
CERT-EU
Vendor
CERT-EU
Threat
medium
Exploited
Yes

Summary

On 23 March 2026, Citrix published a security advisory addressing multiple vulnerabilities affecting NetScaler ADC and NetScaler Gateway. These vulnerabilities may lead to sensitive information disclosure and user session mix-up under specific configurations. At the time of writing, there is no public evidence of active exploitation. It is strongly recommended updating affected gateways, prioritising…

Product

Security advisory

What to do

General, cautious steps (verify details in the official source):

  • Prioritize patching or mitigation immediately (treat as actively risky).
  • Identify affected product versions in your inventory and verify whether you are impacted.
  • Apply vendor patches/updates or recommended mitigations as soon as available.
  • Check logs/telemetry for indicators of compromise and suspicious activity.
  • Consider temporary hardening: restrict access, reduce attack surface, and monitor aggressively.
  • Read the official advisory for exact affected versions and remediation steps.

Official advisory

Related advisories