Alert GCSA-26261 - Vulnerabilita' critica in Citrix NetScaler ADC e Gateway

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-26261 Data: 12 ottobre 2026 Titolo: Vulnerabilita' critica in Citrix NetScaler ADC e Gateway ****************************************************************** :: Descrizione del problema Citrix ha rilasciato nuove versioni dei suoi prodotti per risolvere una vulnerabilita' critica. CVE-2026-107406 (CVSS score 9.5) Per risultare vulnerabili, le appliance NetScaler ADC e NetScaler Gateway devono essere configurate come Identity Provider (IdP) o Service Provider (SP) SAML (Security Assertion Markup Language). Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Se configurato come SAML IdP: NetScaler ADC e NetScaler Gateway versioni comprese tra la 14.1-73.37 e la 14.1-73.41, inclusa NetScaler ADC e NetScaler Gateway versioni comprese tra la 13.1-64.23 e la 13.1-64.28, inclusa NetScaler ADC FIPS versioni comprese tra la 14.1-73.37 FIPS e la 14.1-73.41 FIPS, inclusa NetScaler ADC FIPS e NDcPP versioni comprese tra la 13.1-37.279 e la 13.1-37.282, inclusa Se configurato come SAML SP o SAML IdP: NetScaler ADC e NetScaler Gateway versioni precedenti alla 14.1-73.37 NetScaler ADC e NetScaler Gateway versioni precedenti alla 13.1-64.23 NetScaler ADC FIPS versioni precedenti alla 14.1-73.37 FIPS NetScaler ADC FIPS e NDcPP versioni precedenti alla 13.1-37.279 :: Impatto Denial of Service (DoS) Esecuzione remota di comandi o codice arbitrario (RCE) :: Soluzioni Aggiornare i prodotti alle ultime versioni. NetScaler ADC and NetScaler Gateway versione 14.1-73.46 NetScaler ADC and NetScaler Gateway versione 13.1-64.29 NetScaler ADC FIPS 14.1-73.46 FIPS NetScaler ADC FIPS 13.1-37.283 FIPS & NDcPP https://docs.netscaler.com/en-us/citrix-adc/current-release/upgrade-downgrade-citrix-adc-appliance.html https://docs.netscaler.com/en-us/citrix-adc/current-release/upgrade-downgrade-citrix-adc-appliance/upgrade-standalone-appliance.html https://support.citrix.com/external/article/CTX691210/netscaler-upgrades-and-general-configura.html https://www.citrix.com/downloads/citrix-adc/ :: Riferimenti Citrix Security Bulletin https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697191 https://community.citrix.com/techzone-blogs/110_security-updates/protecting-customers-immediate-guidance-for-cve-2026-107406-in-netscaler-adc-and-netscaler-gateway-r1631/ Steps to Take if NetScaler ADC is Suspected to be Compromised https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html Bleeping Computer https://www.bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately/ CVE ID https://www.cve.org/CVERecord?id=CVE-2026-107406 GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaszRwQAKCRDBnEyTZRJg QmamAJwM8HerCH/R/IRgAmXczsDY+36xmwCg1gAgk+7a0z5zbKQ+KvlKnUN/op8= =yRmo -----END PGP SIGNATURE-----