Citrix NetScaler Console authentication bypass (CVE-2026-120869)

Citrix NetScaler Console is affected by a high-severity authentication bypass vulnerability, identified as CVE-2026-120869. The vulnerability allows an unauthenticated, remote attacker to bypass authentication controls and gain unauthorized access to restricted resources on the appliance. Proof-of-concept exploit code has been publicly released, increasing the risk of exploitation for unpatched systems.

Impact

An attacker can gain unauthorized access to the NetScaler Console, potentially leading to unauthorized information disclosure or further compromise of the management infrastructure. The CVSS score is 9.3, reflecting the critical impact of unauthenticated network access.

Recommendation

• Immediately audit all internet-facing NetScaler Console instances for unusual access patterns.
• Refer to the official vendor security bulletin at https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697320 to identify and apply the latest security patches.
• Restrict administrative access to NetScaler Console to known, trusted management IP addresses.