Critical CVE-2026-120868 Affects Citrix NetScaler ADC and Gateway

## Overview Citrix disclosed a critical vulnerability, CVE-2026-120868, affecting NetScaler ADC and NetScaler Gateway. This memory overflow issue can lead to unpredictable behavior or a Denial of Service (DoS). The CVSS score for this vulnerability is 9.3, indicating its severity. ## Technical Details The vulnerability exists in the Packet Processing component of Citrix NetScaler products. An attacker can exploit this memory overflow to disrupt normal operations. This can result in system crashes or erratic behavior, which can severely impact service availability. ## Impact If exploited, CVE-2026-120868 can lead to significant downtime for organizations using Citrix NetScaler ADC or Gateway. The unpredictable behavior may compromise system integrity and availability, making it critical for organizations to address this vulnerability promptly. ## Mitigation Defenders should prioritize applying the latest patches provided by Citrix. According to reports from hkcert.org and other outlets, Citrix has released updates to address this and other vulnerabilities. Organizations should also review their security policies and ensure that all Citrix products are updated to the latest versions.