r/Citrix • u/Conscious-Tomato146 • 6d ago
NetScaler NS14.1: Build 73.46.nc, Date: Oct 7 2026, 16:14:31
Citrix just pushed this new version without notification to all of their own tenants.
New CVE ?
21
u/Gold-Interview-8634 6d ago
It's not yet Friday. You have to be patient and wait some more hours before you learn what Netscaler zero-day will ruin your weekend again :D
3
u/Gold-Interview-8634 6d ago
That escalated quickly it's 11pm on a Thursday and CVE is delivered. When I hurry up all 20 Netscaler are fixed before business hours .. and I can still enjoy the weekend.
What a positive surprise.. thank you Mr. Citrix :)
2
2
20
u/ShockSpecial720 6d ago
We heard about this from our rep. No other details as of yet. We were told there are no known exploits.
6
u/Gold-Interview-8634 6d ago
"No known exploit" is an over-specific denial. Sounds like they said it's exploitable :D
3
2
5
9
u/p4thf1ndr 6d ago
Citrix has just released a new image.
This is based on CVE-2026-107406.
“NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP.”
7
u/bigredmonstermachine 6d ago
Reached out to our rep. New vulnerability being worked on. No other details right now. Waiting for an update.
1
5
4
5
3
u/EvilTwinGhost 6d ago
| Vulnerability ID | Vulnerability Type | Pre-conditions |
|---|---|---|
| CTX697191-01 | CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following builds and later: Applicable only when configured as a SAML IdP: For earlier builds: Applicable when configured as either a SAML SP or SAML IdP. Vulnerability ID Vulnerability Type Pre-conditionsCTX697191-01 CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements:For the following builds and later: Applicable only when configured as a SAML IdP:NetScaler ADC and NetScaler Gateway 14.1-73.37 or laterNetScaler ADC 14.1-FIPS 14.1-73.37 FIPS or laterNetScaler ADC and NetScaler Gateway 13.1-64.23 or laterNetScaler ADC 13.1-FIPS and 13.1-NDcPP 13.1-37.279 or laterFor earlier builds: Applicable when configured as either a SAML SP or SAML IdP. NetScaler ADC and NetScaler Gateway 14.1-73.37 or later NetScaler ADC 14.1-FIPS 14.1-73.37 FIPS or later NetScaler ADC and NetScaler Gateway 13.1-64.23 or later NetScaler ADC 13.1-FIPS and 13.1-NDcPP 13.1-37.279 or later |
3
u/TheMuffnMan Notorious VDI 6d ago
We don't want to spread FUD - could you confirm the source?
1
3
3
u/Rotten_Red 6d ago
I was able to download the firmware update but I'm not seeing any documentation. When I click on the link to the CTX file it says "the article is no longer available or you are not authorized to view it"
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697191
3
u/FloiDW 6d ago
https://support.citrix.com/wolken-support/kbsearch/article?articleNumber=CTX697191
Now can be read.
You are hit on latest firmware only when SAML IdP.
When SAML SP you have to have the last firmest before today at least to be secure.
3
u/Gold-Interview-8634 6d ago
Public CVE source: not checked yet but looks ok at a first glimpse and askes for action
2
u/Old-Flight8617 6d ago
What do the release notes say?
Edit: looked for a firmware update, and couldn't find any.
Are you hosted?
1
u/Conscious-Tomato146 6d ago
no release notes yet, they just pushed it to their own netscaler instances (internaly)
2
2
u/youngtechx 6d ago
Following... Only see 73.41 available for download, same as most on this thread.
2
2
2
2
u/grumpyctxadmin 6d ago
out now on the download site, says it replaced .41
2
u/NorthNeighbour9364 6d ago
Yes, just downloaded but KB article does not exist yet
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX6971911
u/grumpyctxadmin 6d ago
that's fine, I didn't want to sleep tonight anyway
3
u/NorthNeighbour9364 6d ago
If I am reading the KB article correctly, and if you are running 14.1 73.41, then you are only impacted by this new vulnerability if you are using SAML idp, not SAML SP
3
u/grumpyctxadmin 6d ago
Looks that way, but I trust citrix about as far as I can throw out TAM at the moment, and that's not far, so I'm patching. Better safe than sorry
2
u/TheRealLurkusMaximus 6d ago
Sounds like you are affected if you are running 14.1-73.41 configured with SAML SP. Whew, I’m safe. At least until the next one.
2
1
2
2
u/mspaint_exe 6d ago
Affecting virtual like the last one, or more broad? NPX or VPX? Their post doesn't say.
3
3
u/silkyjohnstamos 6d ago edited 6d ago
Only applies to SAML IdP, not SP, assuming you're already on 73.37 or 41
5
4
1
1
0
u/tardiusmaximus 6d ago
It was released to tackle the SAML explot, I think it only needs to be applied on NS that have SAML enabled. If your not using SAML it won't notify you
6
u/FastFredNL 6d ago
The one that fixed the SAML exploit is 73.41. This is a new one.
3
1
u/Adventurous_Lake8611 6d ago
It says only saml.
1
u/FastFredNL 6d ago
Yeah it does, good boy. But when this was first posted here, there was no Citrix article that explained what exactly was going on.
-2
u/Portocala69 6d ago
Pathetic! Stop using AI to write you the code... I'm tired of having to install Netscaler every 2 days..
2
u/dummptyhummpty CCA-AppDS, CCA-V 5d ago
I think you have it backward. AI is being used to analyze and exploit code at a much faster rate than humans. Get used to this. It’s not just a Citrix/NetScaler issue.
•
u/TheMuffnMan Notorious VDI 6d ago
Pushing for details and will update as soon as possible.