CVE-2026-120864 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.3 CRITICAL	NETWORK	LOW	NONE	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 24.14%

Vulnerability Media Exposure

[ENGLISH] Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass
Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below - CVE-2026-120868 (CVSS score: 9.3) - A memory overflow vulnerability in Packet
Published: 2026-11-12T21:08:49+05:30
[GERMAN] Citrix Systems NetScaler ADC und Gateway: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Citrix Systems NetScaler ADC und Gateway ausnutzen, um einen Denial-of-Service-Angriff auszulösen, vertrauliche Informationen offenzulegen oder nicht näher spezifizierte Angriffe mit hohen Auswirkungen auf Vertraulichkeit, Integrität und Verfügbarkeit durchzuführen.
Published: 2026-11-12T23:00:00+00:00

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305