在多个漏洞被公开并已被积极利用后，Citrix再次提醒客户修补NetScaler的安全漏洞。
Citrix is urging customers to patch another critical NetScaler vulnerability after weeks of disclosures involving actively exploited flaws.
CVE-2026-107406影响NetScaler ADC和NetScaler Gateway，可能导致远程代码执行（RCE）或拒绝服务（DoS）攻击。该漏洞的CVSS v4.0评分为9.5。
CVE-2026-107406 affects NetScaler ADC and NetScaler Gateway and can lead to remote code execution (RCE) or denial of service (DoS). It carries a CVSS v4.0 score of 9.5. The affected configurations depend on the software version.
受影响的配置取决于软件版本：较旧的版本在作为SAML（安全断言标记语言）服务提供者（SP）或身份提供者（IdP）时易受攻击；部分较新的版本仅在身份提供者配置中受到影响。Citrix提供了受影响版本及所需更新的详细信息。
Older builds are vulnerable when configured as a SAML (Security Assertion Markup Language) service provider (SP) or identity provider (IdP); some more recent builds are affected only in the identity provider configuration. Citrix's advisory lists the affected builds and required updates.
使用NetScaler实例的安全私有访问混合部署也需要进行修补。该漏洞属于CWE-119类别，即内存缓冲区操作限制不当。客户需自行更新其部署环境。
Secure Private Access Hybrid deployments using NetScaler instances also need patching. Citrix classifies the flaw as CWE-119: improper restriction of operations within a memory buffer. Customers must update their own deployments.
Citrix表示已对其管理的云服务和自适应认证服务进行了必要的更新。
Citrix says it handles the necessary updates for its managed cloud services and Adaptive Authentication.
虽然Citrix未说明该漏洞在公开前是否已被用作零日攻击，但感谢JPMorgan Chase的XOR团队中的Michael Tucker、Chew Keong Tan和Alex Bernier以及Maxim Suhanov的发现。
Citrix did not say whether this vulnerability was already exploited as a zero-day before disclosure, but credited Michael Tucker, Chew Keong Tan, and Alex Bernier at JPMorgan Chase's XOR Team, along with Maxim Suhanov, for the discovery.
谷歌研究人员指出，自9月初以来，针对CVE-2026-88772的攻击活动一直存在，北美和欧洲的政府、金融、法律和教育机构可能已受到影响。Citrix在最近一次漏洞修复更新中同时修复了8个漏洞。
Google researchers said a campaign exploiting CVE-2026-88772 had been underway since at least early September, with organizations in government, finance, legal, and education across North America and Europe likely affected. Citrix disclosed the flaw weeks later as part of a release that patched eight vulnerabilities.
上周五，Citrix还披露了另一个已被利用的漏洞CVE-2026-88779，其严重性评分为8.7。
Citrix disclosed another exploited flaw, CVE-2026-88779, last Friday that carries a severity score of 8.7.
这两个漏洞都涉及影响SAML配置的内存溢出问题，其中CVE-2026-88779的攻击能力更强，但尚未被证实有实际被利用的案例。
Both that flaw and the newly disclosed vulnerability involve memory overflows affecting SAML configurations. The latter can also allow remote code execution, carries a higher severity score, and has not been identified by Citrix as exploited. ®