Citrix and Ivanti release patches for critical and high‑severity vulnerabilities

# Citrix and Ivanti release patches for critical and high‑severity vulnerabilities

https://gcdradar.vercel.app/incidents/citrix-and-ivanti-release-patches-for-critical-and-high-seve · AIR-2026-1901 · live

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability): Critical rating with vendor patches, no confirmed exploitation
- Fix status: Patched
- First reported: 2026-11-11
- AI role: No AI role
- Products: Citrix, Ivanti
- CVE ids: CVE-2026-120868

## Summary

Citrix and Ivanti disclosed multiple critical and high‑severity vulnerabilities that could allow attackers to tamper with certificate entries, execute code remotely, and compromise hosts. The vendors have issued patches to address the flaws.

## What to do

Deploy the NetScaler patches covering CVE‑2026‑120868.

## Latest updates

- 2026-11-12: Report adds CVE‑2026‑120868 details and specifies patches for NetScaler ADC, Gateway, and Console addressing DoS and auth bypass. (https://thehackernews.com/2026/11/citrix-patches-12-netscaler-and-secure.html)
- 2026-11-11: Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities (https://securityweek.com/citrix-ivanti-patch-critical-and-high-severity-vulnerabilities)

## Sources

- 2026-11-11 SecurityWeek: Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities https://securityweek.com/citrix-ivanti-patch-critical-and-high-severity-vulnerabilities
- 2026-11-12 The Hacker News: Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass https://thehackernews.com/2026/11/citrix-patches-12-netscaler-and-secure.html
- 2026-11-12 CERT-EU: 2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway https://cert.europa.eu/publications/security-advisories/2026-020
- 2026-11-13 SecurityWeek: Citrix Patches 10 Critical NetScaler Vulnerabilities https://securityweek.com/citrix-patches-10-critical-netscaler-vulnerabilities

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.