Tip: for the Nov 12 NetScaler fixes, patch Gateway/AAA appliances first and check Console exposure
- Use
show ns versionon each appliance and compare against the fixed builds. - Don't forget FIPS/NDcPP builds and NetScaler instances behind Secure Private Access hybrid deployments.
- Push the Secure Access Client updates to endpoints too (privilege escalation to SYSTEM/root).
Sources: Citrix Security Bulletin CTX697305: Citrix NetScaler ADC and NetScaler Gateway (Nov 12, 2026; text mirrored by CIRCL) · The Hacker News: Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass (Nov 12, 2026)