Authentication Bypass in Citrix NetScaler Console
CVE-2026-120869

9.3CRITICAL

Key Information:

Vendor

Citrix Netscaler

Status
Console
Vendor
CVE Published:
12 November 2026

What is CVE-2026-120869?

An unauthenticated attacker can exploit a vulnerability in the Citrix NetScaler Console, enabling them to bypass authentication controls. This flaw allows unauthorized users to access restricted resources, potentially leading to serious security breaches. It is essential to apply necessary security patches and follow best practices to safeguard your applications and infrastructure against such vulnerabilities.

Affected Version(s)

Console 0 < 14.1-74.34

References

https://support.citrix.com/support-home/kbsearch/article?...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.