{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4368", "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", "state": "PUBLISHED", "assignerShortName": "NetScaler", "dateReserved": "2026-03-18T05:23:50.518Z", "datePublished": "2026-03-23T20:09:44.971Z", "dateUpdated": "2026-03-24T03:56:06.153Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", "shortName": "NetScaler", "dateUpdated": "2026-03-23T20:09:44.971Z"}, "title": "Race Condition leading to User Session Mixup", "datePublic": "2026-03-23T20:02:00.000Z", "affected": [{"vendor": "NetScaler", "product": "ADC", "versions": [{"status": "affected", "version": "14.1.66.54", "versionType": "patch"}], "defaultStatus": "unaffected"}, {"vendor": "NetScaler", "product": "Gateway", "versions": [{"status": "affected", "version": "14.1.66.54"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Race Condition in\u00a0NetScaler ADC and NetScaler Gateway when appliance is configured as\u00a0Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or\u00a0AAA virtual server\u00a0leading to User Session Mixup", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<span>Race Condition in&nbsp;</span><span>NetScaler ADC and NetScaler Gateway when a</span><span>ppliance is configured as&nbsp;</span><span>Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or</span><span>&nbsp;</span><span>AAA virtual server</span><span>&nbsp;leading to User Session Mixup&nbsp;</span><br>"}]}], "references": [{"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-23T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-4368"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-24T03:56:06.153Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-4368", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-23T20:38:53.482028Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T20:38:57.892Z"}}], "cna": {"title": "Race Condition leading to User Session Mixup", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NetScaler", "product": "ADC", "versions": [{"status": "affected", "version": "14.1.66.54", "versionType": "patch"}], "defaultStatus": "unaffected"}, {"vendor": "NetScaler", "product": "Gateway", "versions": [{"status": "affected", "version": "14.1.66.54"}], "defaultStatus": "unaffected"}], "datePublic": "2026-03-23T20:02:00.000Z", "references": [{"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300"}], "x_generator": {"engine": "Vulnogram 1.0.1"}, "descriptions": [{"lang": "en", "value": "Race Condition in\u00a0NetScaler ADC and NetScaler Gateway when appliance is configured as\u00a0Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or\u00a0AAA virtual server\u00a0leading to User Session Mixup", "supportingMedia": [{"type": "text/html", "value": "<span>Race Condition in&nbsp;</span><span>NetScaler ADC and NetScaler Gateway when a</span><span>ppliance is configured as&nbsp;</span><span>Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or</span><span>&nbsp;</span><span>AAA virtual server</span><span>&nbsp;leading to User Session Mixup&nbsp;</span><br>", "base64": false}]}], "providerMetadata": {"orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", "shortName": "NetScaler", "dateUpdated": "2026-03-23T20:09:44.971Z"}}}, "cveMetadata": {"cveId": "CVE-2026-4368", "state": "PUBLISHED", "dateUpdated": "2026-03-24T03:56:06.153Z", "dateReserved": "2026-03-18T05:23:50.518Z", "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", "datePublished": "2026-03-23T20:09:44.971Z", "assignerShortName": "NetScaler"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Race Condition in\u00a0NetScaler ADC and NetScaler Gateway when appliance is configured as\u00a0Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or\u00a0AAA virtual server\u00a0leading to User Session Mixup"}, {"lang": "es", "value": "Condici\u00f3n de carrera en NetScaler ADC y NetScaler Gateway cuando el dispositivo est\u00e1 configurado como Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) o servidor virtual AAA, lo que lleva a la mezcla de sesiones de usuario."}], "id": "CVE-2026-4368", "lastModified": "2026-03-24T15:54:09.400", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", "type": "Secondary"}]}, "published": "2026-03-23T21:17:17.667", "references": [{"source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300"}], "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", "vulnStatus": "Awaiting Analysis"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "14.1.66.54"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ADC", "source": "cna", "vendor": "NetScaler"}, "product": "adc", "vendor": "netscaler"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "14.1.66.54"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Gateway", "source": "cna", "vendor": "NetScaler"}, "product": "gateway", "vendor": "netscaler"}], "analysis": {"en": {"generated_at": "2026-03-24T04:26:25.929163+00:00", "value": {"mitigation_remediation": ["Check Citrix\u2019s support portal for a patch or hotfix that addresses CVE\u20112026\u20114368 and install it as soon as it is available.", "If no patch is yet released, consider disabling or removing unused gateway services such as SSL VPN, ICA Proxy, CVPN, RDP Proxy, or AAA virtual server until a fix is applied.", "Implement network segmentation to isolate NetScaler appliances from critical internal networks.", "Monitor authentication and session logs for abnormal session mixups or repeated session failures that may indicate exploitation."], "summary": {"action": "Apply Patch", "impact": "User session mixup potentially enabling unauthorized session access"}, "threat_synthesis": {"affected_systems": "Citrix NetScaler ADC and NetScaler Gateway are affected. The specific product models are NetScaler ADC and NetScaler Gateway. No version information is supplied by Citrix, so all deployments using these products in gateway mode are potentially vulnerable until verified otherwise.", "description_and_impact": "A race condition in NetScaler ADC and NetScaler Gateway appliances when they are configured as Gateway or AAA virtual server causes user session mixup. The flaw can result in a user\u2019s session being incorrectly identified as another user\u2019s session, which may allow unauthorized access to session data or functions. The underlying weakness is a race condition (CWE\u2011362).", "risk_and_exploitability": "The CVSS score of 7.7 classifies this vulnerability as high severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, indicating that no publicly known exploits have been reported yet. The likely attack vector is remote interaction with the gateway services (SSL VPN, ICA Proxy, CVPN, RDP Proxy, or AAA virtual server); this inference is based on the description that the race condition occurs when the appliance is configured in these modes. Exploitation may require precise timing or concurrent interactions, which could reduce the ease of exploitation."}}}}, "created": "2026-03-24T10:32:57.590230+00:00", "updated": "2026-03-25T20:36:46.862528+00:00", "vendors": ["netscaler", "netscaler$PRODUCT$adc", "netscaler$PRODUCT$gateway"], "weaknesses": ["CWE-362"]}