This isn't confusing. NS14.1-66.59 and NS14.1-60.58 released back to back and both claim to address CTX696300. However CTX696300 says you have to get to NS14.1-66.59.

It's nice that they back-ported the fix to the 60.xx release train so you have an option for making the bare minimum changes. But, yeah, they need to keep the KB articles up to date.

Where does it say you have to use 14.1-66.59?

Hi Eric! In CTX696300, it says the following NetScaler ADC and NetScaler Gateway versions are affected by the vulnerabilities: CVE-2026-3055 • NetScaler ADC and NetScaler Gateway 14.1 BEFORE 14.1-66.59 CVE-2026-4368 • NetScaler ADC and NetScaler Gateway 14.1-66.54 For the CVE-2026-3055 I read it as any version lower than 14.1-66.59 is affected. NS14.1-60.58 being lower than NS14.1-66.59 would tell me not to install it because it would be vulnerable to CVE-2026-3055. And for CVE-2026-4368 I read it as just 14.1-66.54 is affected. https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300

Oh, I see it now

I don't mean to be argumentative about it, the version numbers are just kludgy in my mind.

No, I like the feedback.

I got the notice! Thanks Eric