{"id":"EUVD-2026-124482","enisaUuid":"10bab401-7c69-3189-bc97-9272245bdc06","description":"An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance","datePublished":"Nov 12, 2026, 2:03:14 PM","dateUpdated":"Nov 12, 2026, 2:03:14 PM","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","references":"https://support.citrix.com/support-home/kbsearch/article?articleNumber\u003dCTX697320\n","aliases":"CVE-2026-120869\nGHSA-7h45-cgv5-858r\n","assigner":"NetScaler","epss":0.51,"enisaIdProduct":[{"id":"a7b09751-db6b-3ed8-ace0-bd5cfd0a4a1f","product":{"name":"console","vendor":{"name":"iiDk-the-actual"}},"product_version":"0 \u003c14.1-74.34"}],"enisaIdVendor":[{"id":"2bb78290-02f4-32c7-ac2d-3eefa27e9e76","vendor":{"name":"Citrix NetScaler"}}],"enisaIdVulnerability":[{"id":"16b45def-07a5-375d-ba4c-64976b2023d2","vulnerability":{"id":"CVE-2026-120869","description":"An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance","datePublished":"Nov 12, 2026, 2:03:14 PM","dateUpdated":"Nov 12, 2026, 2:03:14 PM","status":"PUBLISHED","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","references":"https://support.citrix.com/support-home/kbsearch/article?articleNumber\u003dCTX697320\n","enisa_id":"EUVD-2026-124482\n","assigner":"NetScaler","epss":0.51,"dataProcessed":"Nov 14, 2026, 10:00:24 PM","vulnerabilityProduct":[{"id":"db4e1b84-1042-3061-b82f-5affbfa8a726","product":{"name":"console","vendor":{"name":"iiDk-the-actual"}},"product_version":"0 \u003c14.1-74.34"}],"vulnerabilityVendor":[{"id":"2b132b2d-6c1d-37d6-afd8-cad61001df9c","vendor":{"name":"Citrix NetScaler"}}]}},{"id":"60787612-2d99-3bfc-b162-458cedc29668","vulnerability":{"id":"GHSA-7h45-cgv5-858r","description":"An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance","datePublished":"Nov 12, 2026, 3:31:56 PM","dateUpdated":"Nov 12, 2026, 3:31:56 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-120869\nhttps://support.citrix.com/support-home/kbsearch/article?articleNumber\u003dCTX697320\n","enisa_id":"EUVD-2026-124482\n","aliases":"GHSA-7h45-cgv5-858r\nCVE-2026-120869\n","epss":0.0,"dataProcessed":"Nov 14, 2026, 10:00:43 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"ed492a8c-5c9d-3247-8dad-9ac7e5206e4c","advisory":{"id":"NCSC-2026-0491","description":"Meerdere kwetsbaarheden verholpen in Citrix Secure Access Client, NetScaler ADC, NetScaler Gateway en NetScaler Console.","datePublished":"Nov 12, 2026, 2:13:25 PM","dateUpdated":"Nov 12, 2026, 2:13:25 PM","baseScore":0.0,"references":"","aliases":"CVE-2026-107407\nCVE-2026-107408\nCVE-2026-107409\nCVE-2026-107410\nCVE-2026-107411\nCVE-2026-107412\nCVE-2026-107413\nCVE-2026-107414\nCVE-2026-107415\nCVE-2026-111340\nCVE-2026-111341\nCVE-2026-111342\nCVE-2026-111343\nCVE-2026-111344\nCVE-2026-111345\nCVE-2026-111346\nCVE-2026-111347\nCVE-2026-111348\nCVE-2026-111349\nCVE-2026-118268\nCVE-2026-120860\nCVE-2026-120861\nCVE-2026-120862\nCVE-2026-120863\nCVE-2026-120864\nCVE-2026-120865\nCVE-2026-120866\nCVE-2026-120867\nCVE-2026-120868\nCVE-2026-120869\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"45d960c2-909b-3910-a6bb-f580fcb844ca","product":{"name":"NetScaler ADC and NetScaler Gateway","vendor":{"name":"Citrix"}}},{"id":"62892d72-5a73-3c12-99f4-8990430d636f","product":{"name":"Secure Access Client for Windows","vendor":{"name":"Citrix"}}},{"id":"8d317844-5ee3-39c5-b26e-e0ca112b13b7","product":{"name":"NetScaler ADC","vendor":{"name":"Citrix"}}},{"id":"a9e82f9c-3cc3-32f2-8d14-c7b7452ab4ae","product":{"name":"NetScaler","vendor":{"name":"Citrix Systems"}}}]}}]}