Critical vulnerability discovered in certain Citrix products 

Oct 12, 2026 - 04:15 PM
Cybersecurity image of a digital lock

A new critical vulnerability has been discovered in Citrix NetScaler ADC and NetScaler Gateway products, the company announced Oct 8. Citrix said the vulnerability involves memory overflow that could lead to cyber actors taking remote control of a victim’s system or denying service under specific configuration conditions. The vulnerability scored a 9.5 out of 10 under the Common Vulnerability Scoring System. The company urged affected customers to upgrade the impacted products to recommended versions as soon as possible. Citrix said it was unaware of any unmitigated exploits of the vulnerability as of Oct. 8.

For more information on this or other cyber and risk issues, contact John Riggi, AHA national advisor for cybersecurity and risk, at jriggi@aha.org, or Scott Gee, AHA deputy national advisor for cybersecurity and risk, at sgee@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity. 

Related News Articles

Chairperson's File
Chair File: Strengthening Cybersecurity to Protect Patients and Our Hospitals’ Mission
Public
What does patient safety mean to you? For many, patient safety means what we can see: hand hygiene, infection prevention and control practices, medication…
Headline
Agencies warn of Chinese government-linked cyber actors using hacking tools to steal sensitive data
A joint advisory released Oct. 8 by U.S. and international agencies warns of Chinese government-linked cyber threat actors using automated and hands-on hacking…
Headline
NSA recommends adoption of zero trust controls to improve cybersecurity of essential functions
The National Security Agency Oct. 8 released guidance for critical infrastructure organizations that recommends adopting high-impact zero trust strategies to…
Headline
Agencies warn of credential-compromising campaign actively targeting critical infrastructure networks
The FBI and Secret Service released an advisory Oct. 6 warning of ongoing activities by FortiBleed, a global credential-compromise campaign used by threat…
Headline
Blog explores how clinical continuity and collaboration strengthen cyber resilience
In a new blog, John Riggi, AHA national advisor for cybersecurity and risk, and Scott Gee, AHA deputy national advisor for cybersecurity and risk, highlight…
Headline
Senate passes Health Care Cybersecurity and Resilience Act
The Senate passed the Health Care Cybersecurity and Resilience Act on Sept. 30 by unanimous consent. The bipartisan bill seeks to improve coordination between…