NetScaler CVE Checklist: Updates, Security Assessment and Incident Response

Critical vulnerabilities in NetScaler ADC and NetScaler Gateway require a structured response: assess exposure, select a secure target build, update the systems and then check for indicators of compromise.

This checklist summarizes the key steps for new NetScaler CVEs. The current vendor security bulletin, supported firmware releases and the specifics of the environment always remain authoritative.

Assess the CVE and prepare the update

For CVE-2026-8452, additionally document whether and during which period the appliance was publicly accessible as a Gateway or AAA virtual server. Record the build that was running at the time and the exact upgrade date. According to Citrix, affected versions include NetScaler ADC and NetScaler Gateway before 14.1-72.61 and before 13.1-63.18.

  • Review the security bulletin and identify affected product versions.
  • Document the current build, HA status, partitions and enabled features.
  • Check the supported target release, known issues and upgrade paths.
  • Back up the configuration and system files and define a reliable rollback plan.
  • Implement and document vendor-provided workarounds until the update is completed.
Continue reading “NetScaler CVE Checklist: Updates, Security Assessment and Incident Response”

NetScaler ADC Firmware Upgrade

Regular firmware updates are one of the most important maintenance tasks in a NetScaler ADC infrastructure. In addition to new features, current firmware releases include important bug fixes and security-related patches. Especially in the case of security advisories or actively exploited vulnerabilities, firmware updates should be scheduled promptly.

Because a firmware upgrade can affect production services such as NetScaler Gateway, Load Balancing, Content Switching, AAA, GSLB, or SSL Offloading, it should never be performed without proper preparation. A structured approach reduces downtime and minimizes the risk of unexpected issues.

This article describes the recommended upgrade process for production NetScaler ADC environments.

Continue reading “NetScaler ADC Firmware Upgrade”

Install new Microsoft Teams (version 2) in Citrix

The new version of Microsoft Teams (often referred to as “Teams 2.0”) has been the new standard since July 1, 2024.

For VDI environments, this means:

  • October 1, 2024 → End of Support (Classic Teams in VDI)
  • July 1, 2025 → End of Availability

In short:
There is no way back.

Timeline VDI Clients
Continue reading “Install new Microsoft Teams (version 2) in Citrix”

Citrix License Activation Service (LAS): Goodbye License Files

If you’re a Citrix customer and thinking “next week…” right now — understandable. But starting April 15, 2026, file-based Citrix license files will no longer work. This is not a warning; it’s a hard shutdown date.

That means: if you haven’t migrated to LAS by then, you risk real outages (apps, desktops, or features depending on the component and version).

LAS is not a migration of your workloads to the cloud. Your site continues to run on-premises (DDCs, StoreFront, VDAs, etc.).
The only thing that changes is the activation and licensing mechanism.

Continue reading “Citrix License Activation Service (LAS): Goodbye License Files”

Workaround after Remote Assistance Error

After installing the January 2026 Microsoft security updates, Remote Assistance (msra.exe) no longer works on multiple Windows versions. This directly affects Citrix Director Shadowing, as the generated invite files can no longer be opened on patched systems.

The issue is caused by a security hardening related to CVE-2026-20824 – Windows Remote Assistance Security Feature Bypass Vulnerability. While the fix is technically correct from a security perspective, it currently breaks legitimate Remote Assistance workflows in enterprise environments.

Continue reading “Workaround after Remote Assistance Error”