Citrix warns of critical NetScaler RCE/DoS flaw, urges immediate patching

Citrix disclosed a critical vulnerability (CVE-2026-107406) in NetScaler that could enable remote code execution or denial-of-service. The vendor has issued an urgent patch advisory, but exploitation details and active exploitation status remain unclear. Given NetScaler's widespread enterprise deployment, unpatched systems face elevated risk of compromise.