Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 09/09/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| netscaler application delivery controller | ≥ 13.1, < 13.1-37.277≥ 13.1, < 13.1-63.21≥ 14.1, < 14.1-73.32≥ 14.1-66.68, ≤ 14.1-73.32 | 13.1-37.27713.1-63.2114.1-73.32 |
| netscaler gateway | ≥ 13.1, < 13.1-63.21≥ 14.1, < 14.1-73.32 | 13.1-63.2114.1-73.32 |
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free