#netscaler
-
Citrix Urges Admins to Patch New NetScaler RCE Flaw at Once
A critical flaw in NetScaler ADC and NetScaler Gateway allows remote code execution or a denial-of-service crash. No active attacks have been seen yet, but more than 21,000 appliances remain exposed online.
-
Citrix rushes out fix for exploited NetScaler zero-day
Citrix has shipped emergency NetScaler updates for CVE-2026-88779, already used in attacks. It is billed as a denial-of-service flaw, but researchers suspect remote code execution too.
-
Inside the Citrix NetScaler Exploit: From a DTLS Packet to Root-Level Code
Researchers have published technical details of CVE-2026-88772, a critical flaw in Citrix NetScaler ADC and Gateway. The DTLS buffer overflow is already being abused in the wild.
-
CISA orders federal agencies to patch exploited Citrix flaws by Wednesday
The US cybersecurity agency has ordered agencies to shield their systems against attacks abusing two critical NetScaler vulnerabilities that are already being exploited in the wild.
-
Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Attack
Security firm watchTowr warned of two unpatched remote-code-execution flaws in NetScaler ADC and Gateway. Citrix has neither confirmed the issue nor shipped a fix, and some administrators have simply powered their appliances off.
-
Attacks on a Critical Authentication-Bypass Flaw in Citrix NetScaler Have Begun
Threat actors have started exploiting the critical CVE-2026-19490 vulnerability in Citrix NetScaler following the release of a working PoC exploit. The flaw allows authentication to be bypassed remotely and without privileges.
-
Critical NetScaler Vulnerability Allows Authentication Bypass
Citrix has released updates for NetScaler ADC and NetScaler Gateway, patching two vulnerabilities, including a critical authentication bypass on gateways and AAA servers.