# FIXTURE_ONLY test table: want_rc|args|expected substring (shared by the bash and Pester tests; args split on spaces)
0|--version 14.1-74.34|PATCHED: input (console, 14.1-74.34): at or above 14.1-74.34, Citrix's fixed build for CVE-2026-120869 (CTX697320). Not proof the appliance was not accessed before the upgrade.
0|--version 14.1-74.35|PATCHED: input (console, 14.1-74.35)
0|--version 14.1-75.1|PATCHED: input (console, 14.1-75.1)
0|--version 14.1-100.0|PATCHED: input (console, 14.1-100.0)
0|--version 14.01-074.34|PATCHED: input (console, 14.01-074.34)
0|--version 14.1-74.34 --product ADM --name FIXTURE_ONLY-nsc|PATCHED: FIXTURE_ONLY-nsc (console, 14.1-74.34)
0|--inventory tests/fixtures/inv_patched.csv|RESULT: PATCHED (4 checked: 4 PATCHED, 0 VULNERABLE, 0 NOT LISTED, 0 UNKNOWN; 0 log review item(s))
0|--inventory tests/fixtures/inv_patched.csv|PATCHED: FIXTURE_ONLY-nsc11 (console, 14.1 Build 74.35)
0|--version 14.1-74.34 --log tests/fixtures/console_clean.log --admin-net 192.0.2.0/24|RESULT: PATCHED (1 checked
1|--version 14.1-74.33|VULNERABLE: input (console, 14.1-74.33): in Citrix's affected range, NetScaler Console 14.1 before 14.1-74.34 (CVE-2026-120869, CTX697320). Upgrade to 14.1-74.34 or later.
1|--version 14.1-73.36|VULNERABLE: input (console, 14.1-73.36)
1|--version 14.1-74.9|VULNERABLE: input (console, 14.1-74.9)
1|--version 14.1-4.42|VULNERABLE: input (console, 14.1-4.42)
3|--version 14.1-60.57 --product netscaler_console|UNKNOWN: input (netscaler_console, 14.1-60.57)
1|--inventory tests/fixtures/inv_mixed.csv|RESULT: VULNERABLE (5 checked: 1 PATCHED, 1 VULNERABLE, 1 NOT LISTED, 2 UNKNOWN; 0 log review item(s))
1|--inventory tests/fixtures/inv_crlf.csv|VULNERABLE: FIXTURE_ONLY-nsc40 (console, 14.1-74.33)
1|--inventory tests/fixtures/inv_mixed.csv --log tests/fixtures/console_review.log --admin-net 192.0.2.0/24|RESULT: VULNERABLE (5 checked: 1 PATCHED, 1 VULNERABLE, 1 NOT LISTED, 2 UNKNOWN; 5 log review item(s))
2|--version 13.1-62.27|NOT LISTED: input (console, 13.1-62.27): release 13.1 is not listed in CTX697320, which lists only Citrix NetScaler Console 14.1 before 14.1-74.34. Citrix makes no statement about 13.1 there and neither does this pack. Check with Citrix.
2|--version 14.2-1.1|NOT LISTED: input (console, 14.2-1.1): release 14.2 is not listed
2|--inventory tests/fixtures/inv_notlisted.csv|RESULT: NOT LISTED (2 checked: 1 PATCHED, 0 VULNERABLE, 1 NOT LISTED, 0 UNKNOWN; 0 log review item(s))
3|--version 14.1|UNKNOWN: input (console, 14.1): not a Console build this pack can judge
3|--version 14.1.74.34|UNKNOWN: input (console, 14.1.74.34): not a Console build
3|--version 14.1-74|UNKNOWN: input (console, 14.1-74)
3|--version NS14.1-74.34|UNKNOWN: input (console, NS14.1-74.34)
3|--version 14.1-74.34 --product console-service|UNKNOWN: input (console-service, 14.1-74.34): CTX697320 lists only Citrix NetScaler Console 14.1. It says nothing about the NetScaler Console service, Console agents, NetScaler ADC or Gateway, and this pack makes no claim about them.
3|--version 14.1-74.34 --product agent|UNKNOWN: input (agent, 14.1-74.34)
3|--version 14.1-74.34 --product adc|UNKNOWN: input (adc, 14.1-74.34)
3|--inventory tests/fixtures/inv_unknown.csv|RESULT: UNKNOWN (5 checked: 1 PATCHED, 0 VULNERABLE, 0 NOT LISTED, 4 UNKNOWN; 0 log review item(s))
3|--inventory tests/fixtures/inv_unknown.csv|UNKNOWN: FIXTURE_ONLY-nsc32 (no product, 14.1-73.36): no product given.
3|--log tests/fixtures/console_clean.log --admin-net 192.0.2.0/24|RESULT: UNKNOWN (0 checked: 0 PATCHED, 0 VULNERABLE, 0 NOT LISTED, 0 UNKNOWN; 0 log review item(s))
3|--log tests/fixtures/console_clean.log|LOG INFO: tests/fixtures/console_clean.log: command source Remote_ip 192.0.2.10 (1 line: 2). Give --admin-net to flag sources outside your admin networks.
5|--log tests/fixtures/console_review.log|RESULT: LOG REVIEW (0 checked: 0 PATCHED, 0 VULNERABLE, 0 NOT LISTED, 0 UNKNOWN; 3 log review item(s))
5|--log tests/fixtures/console_review.log|LOG tests/fixtures/console_review.log: 12 lines read; 7 CMD_EXECUTED, 3 login failure, 1 recovered to default credentials, 1 DEVICECONFIG CMD_EXECUTED (message formats from the NetScaler ADM 14.1 syslog reference; syslog header handling UNVERIFIED).
5|--log tests/fixtures/console_review.log --admin-net 192.0.2.0/24|LOG REVIEW: tests/fixtures/console_review.log: command from outside admin networks, Remote_ip 203.0.113.50 (2 lines: 3,12).
5|--log tests/fixtures/console_review.log --admin-net 192.0.2.0/24|LOG REVIEW: tests/fixtures/console_review.log: login failure from outside admin networks, 198.51.100.7 (2 lines: 5,6).
5|--log tests/fixtures/console_review.log --admin-net 192.0.2.0/24|LOG REVIEW: tests/fixtures/console_review.log: user recovered to default credentials (1 line: 9).
5|--log tests/fixtures/console_review.log --admin-net 192.0.2.0/24|LOG REVIEW: tests/fixtures/console_review.log: commands that may change users, groups, roles, passwords or policies, by keyword (command wording UNVERIFIED) (2 lines: 3,11).
5|--log tests/fixtures/console_review.log --admin-net 192.0.2.0/24|LOG REVIEW: tests/fixtures/console_review.log: DEVICECONFIG commands run on managed instances (1 line: 8).
5|--log tests/fixtures/console_review.log --admin-net 192.0.2.0/24,203.0.113.50,198.51.100.0/24|RESULT: LOG REVIEW (0 checked: 0 PATCHED, 0 VULNERABLE, 0 NOT LISTED, 0 UNKNOWN; 3 log review item(s))
5|--version 14.1-74.34 --log tests/fixtures/console_review.log --admin-net 192.0.2.0/24|RESULT: LOG REVIEW (1 checked: 1 PATCHED
5|--version 13.1-62.27 --log tests/fixtures/console_review.log --admin-net 0.0.0.0/0|RESULT: LOG REVIEW (1 checked: 0 PATCHED, 0 VULNERABLE, 1 NOT LISTED, 0 UNKNOWN; 3 log review item(s))
4||Usage:
4|--version|Usage:
4|--bogus 1|Usage:
4|--product console|Usage:
4|--inventory tests/fixtures/inv_mixed.csv --version 14.1-74.34|Usage:
4|--inventory tests/fixtures/inv_bad_header.csv|ERROR: CSV header must be: name,product,version
4|--inventory tests/fixtures/inv_header_only.csv|ERROR: inventory has no data rows
4|--inventory tests/fixtures/missing.csv|ERROR: cannot read inventory file
4|--log tests/fixtures/missing.log|ERROR: cannot read log file
4|--log tests/fixtures/console_clean.log --admin-net 192.0.2.0/33|ERROR: --admin-net needs IPv4 addresses or CIDR ranges
4|--log tests/fixtures/console_clean.log --admin-net 192.0.2.256|ERROR: --admin-net needs IPv4 addresses or CIDR ranges
4|--log tests/fixtures/console_clean.log --admin-net ,|ERROR: --admin-net needs IPv4 addresses or CIDR ranges
4|--log tests/fixtures/console_clean.log --admin-net 192.0.2.0/24/1|ERROR: --admin-net needs IPv4 addresses or CIDR ranges
