Search
Find a vulnerability
Search criteria
2 vulnerabilities found for Console by Citrix NetScaler
CVE-2026-120869 (GCVE-0-2026-120869)
Vulnerability from nvd – Published: 2026-11-12 14:03 – Updated: 2026-11-12 14:03
VLAI
EPSS
VEX
Title
An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance
Summary
An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance
Severity
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Citrix NetScaler | Console |
Affected:
0 , < 14.1-74.34
(patch)
|
Date Public
2026-11-12 13:57
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Console",
"vendor": "Citrix NetScaler",
"versions": [
{
"lessThan": "14.1-74.34",
"status": "affected",
"version": "0",
"versionType": "patch"
}
]
}
],
"datePublic": "2026-11-12T13:57:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance\u0026nbsp;"
}
],
"value": "An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance"
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-12T14:03:14.594Z",
"orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"shortName": "NetScaler"
},
"references": [
{
"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697320"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"assignerShortName": "NetScaler",
"cveId": "CVE-2026-120869",
"datePublished": "2026-11-12T14:03:14.594Z",
"dateReserved": "2026-11-03T00:53:55.696Z",
"dateUpdated": "2026-11-12T14:03:14.594Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120869 (GCVE-0-2026-120869)
Vulnerability from cvelistv5 – Published: 2026-11-12 14:03 – Updated: 2026-11-12 14:03
VLAI
EPSS
VEX
Title
An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance
Summary
An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance
Severity
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Citrix NetScaler | Console |
Affected:
0 , < 14.1-74.34
(patch)
|
Date Public
2026-11-12 13:57
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Console",
"vendor": "Citrix NetScaler",
"versions": [
{
"lessThan": "14.1-74.34",
"status": "affected",
"version": "0",
"versionType": "patch"
}
]
}
],
"datePublic": "2026-11-12T13:57:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance\u0026nbsp;"
}
],
"value": "An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance"
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-12T14:03:14.594Z",
"orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"shortName": "NetScaler"
},
"references": [
{
"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697320"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"assignerShortName": "NetScaler",
"cveId": "CVE-2026-120869",
"datePublished": "2026-11-12T14:03:14.594Z",
"dateReserved": "2026-11-03T00:53:55.696Z",
"dateUpdated": "2026-11-12T14:03:14.594Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}