Citrix Security Advisory - Critical Vulnerabilities Revealed

The Flaw

On March 23, 2026, Citrix released a crucial security advisory (AV26-267) aimed at addressing critical vulnerabilities in its NetScaler products. The vulnerabilities affect multiple versions of NetScaler ADC and NetScaler Gateway, which are widely used for application delivery and load balancing. Specifically, the advisory targets versions prior to 14.1-66.59 for NetScaler ADC and Gateway 14.1, and versions prior to 13.1-62.23 for 13.1.

These vulnerabilities could potentially allow attackers to exploit the systems, leading to unauthorized access or other malicious activities. The advisory highlights the urgency for users to act swiftly to protect their environments.

What's at Risk

Organizations relying on these NetScaler products are at significant risk if they do not update to the latest versions. The vulnerabilities could expose sensitive data and disrupt services, leading to potential financial and reputational damage. NetScaler ADC FIPS and NDcPP versions prior to 13.1-37.262 are also affected, emphasizing the broad impact across various deployments.

Failing to address these vulnerabilities could leave systems open to exploitation, putting sensitive information at risk and compromising the integrity of applications.

Patch Status

Citrix has provided specific guidance for users to mitigate these vulnerabilities. The recommended action is to update to the secure versions listed in the advisory. Users should upgrade to:

• NetScaler ADC and Gateway 14.1 – version 14.1-66.59 or later
• NetScaler ADC and Gateway 13.1 – version 13.1-62.23 or later
• NetScaler ADC FIPS and NDcPP – version 13.1-37.262 or later

These updates are critical for maintaining security and ensuring that systems are protected against potential threats. Citrix has also linked to relevant security bulletins for CVE-2026-3055 and CVE-2026-4368, which provide further details on the vulnerabilities.

Immediate Actions

Users and administrators are strongly encouraged to review the Citrix security advisory and take immediate action. Here are the steps to follow:

1. Check your current version of NetScaler ADC and Gateway.
2. Update to the latest secure version as recommended in the advisory.
3. Review the linked security bulletins for detailed information on the vulnerabilities.

Taking these steps will significantly reduce the risk of exploitation and help maintain the security of your network environment. Remember, timely updates are essential in the ever-evolving landscape of cybersecurity threats.