CVE-2026-120869: An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance
Published Nov 12, 2026
·Updated
An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance
Event History
Nov 12, 2026
CVE Published
via MITRE·02:03 PM
Data Sourced
via MITRE·02:03 PM
Description
Data Sourced
via NVD·02:17 PM
DescriptionSeverity
Frequently Asked Questions
1
What conditions does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation is network-accessible, requires low attack complexity, and does not require prior privileges or user interaction.
2
What is the potential security impact if exploitation succeeds?
The CVSS assessment rates confidentiality, integrity, and availability impact as high for the vulnerable appliance, with low impact on subsequent systems.