Vulnerability intelligence
CVE-2026-4368
NetScaler ADC
Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session Mixup
CVSS Score
7.7
High
EPSS — Exploit Probability
0.3%
Riskier than 21% of all CVEs · checked 2026-10-17
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
6 articles across 5 outlets · first covered Mar 31, 2026 · latest Mar 31, 2026
Coverage timeline
-
U.S. CISA adds a flaw in Citrix NetScaler to its Known Exploited Vulnerabilities catalogsecurityaffairs.com · Mar 31, 2026
-
Citrix Urges Immediate Patching for Critical NetScaler Vulnerabilitieswww.infosecurity-magazine.com · Mar 24, 2026
-
CVE-2026-3055: NetScaler Memory Disclosure Puts SAML-Enabled Edge Devices at Risksocradar.io · Mar 24, 2026
-
Citrix NetScaler critical flaw could leak data, update nowsecurityaffairs.com · Mar 24, 2026
-
Critical Citrix NetScaler Vulnerability Poised for Exploitation, Security Firms Warnwww.securityweek.com · Mar 24, 2026
-
Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaksthehackernews.com · Mar 24, 2026