vendors/citrix.htmlSecurity news, advisories and CVEs for CitrixMon, 19 Oct 2026 12:28:44 GMT https://www.zscaler.com/blogs/security-research/cve-2026-88771-inside-exploitation-critical-netscaler-rce-vulnerabilityzv7tvtFri, 16 Oct 2026 21:28:21 GMTZscaler ThreatLabz. IntroductionOn September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution (RCE) vulnerability affecting NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The vulnerability carries a CVSS v3.1 score of 9.8…ResearchVulnerabilityZero-day https://news.google.com/rss/articles/CBMicEFVX3lxTE9sVHh0cDFlMmUxVXliLW0xdGt5Nl9ZYkJKUnh2UjRGdDd6OEtQcmhWazFFV2UyRlhKYzIyeDJIY3RrLVBVdVg4dC1Na1lYWGZvM3Z4Y0stYkdQNXE2dUNxRDhNMnFKWUFLSkVxRlMybDjSAXZBVV95cUxQbzIwM0pDZVdRWWJtVmpVQmNUUUUxZ2N0ZUVxakFPNXJUamJpdUZRclA3ODB1czF5WVh4cUlvNFlNcTZvcGpwd1QybFJXN2RiR2YyVTdaVE1LSVFmSlA0N0ctMVV2VGpyMzJPNHZPVlZ1ZkRnS0RB?oc=57q3uk6Thu, 15 Oct 2026 14:48:36 GMTCybersecurity News. Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems CyberSecurityNewsVulnerability https://cybersecuritynews.com/citrix-xenserver-vulnerabilities/7zr19oThu, 15 Oct 2026 14:42:47 GMTCybersecurity News. Citrix has disclosed four XenServer vulnerabilities, including three that could let a malicious user with elevated rights inside a virtual machine compromise or crash the underlying host. Citrix published the high-severity bulletin CTX697170 on October 13,…Vulnerability https://www.securityweek.com/citrix-fortinet-ivanti-patch-29-vulnerabilities-across-their-products/1ui5s7sWed, 14 Oct 2026 07:26:35 GMTSecurityWeek. Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.Vulnerability https://cybersecuritynews.com/citrix-netscaler-zero-day-exploits/1cpmie9Tue, 13 Oct 2026 15:26:50 GMTCybersecurity News. Threat actors are actively exploiting two critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances, allowing them to execute code remotely on exposed systems. The flaws, tracked as CVE-2026-88771 and CVE-2026-88772, received…VulnerabilityZero-day https://news.google.com/rss/articles/CBMiekFVX3lxTE4xdDY4eFdhVlh2VndONGN6REo2RUdZNkxyTmRNUm1RSUhmTTJjQURaXzFlUHlTUVgxakpBV1J2ZTBVQUxzUGpoRXVFRV9uMmplaXR5R2xWekNkZGpBd2pPallzd0dPbE4yQzBUNGRZWFE5U2dHNE92TVpR0gF_QVVfeXFMT0pQbVlxS3VFbEVhZTZFT2xJM2FNVlBMSEIyYTFZWjNfcFc3TEVhNUpuYkgtM3FCTVNCTGVSb1BNOEJ0Rk90Y1J2aERVVjFlSklvNWM1bExkckE3b0lzanFYQVIxbGJuUm1kN3BfeEJuS05jcDc1UlNfclViOWxGTQ?oc=51a8z9llTue, 13 Oct 2026 11:06:55 GMTCybersecurity News. Hackers Exploit Citrix NetScaler 0-Days to Deploy Platypus Remote Access Tool CyberSecurityNewsZero-day https://www.cybersecuritydive.com/news/cisa-citrix-netscaler-customers-patch-new-flaws-disclosed/832741/7dj2spMon, 12 Oct 2026 15:27:12 GMTCybersecurity Dive. A newly discovered critical vulnerability is adding to the workload of customers mitigating other recent flaws.Vulnerability https://www.theregister.com/security/2026/10/09/citrix-gives-netscaler-admins-another-critical-reason-to-patch/5302212mf7ir8Fri, 09 Oct 2026 11:43:00 GMTThe Register. No word on exploitation status, but a 9.5 severity score suggests time is of the essenceVulnerability https://www.bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately/13cvjq4Fri, 09 Oct 2026 08:27:42 GMTBleepingComputer. Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. [...]Vulnerability https://www.securityweek.com/citrix-urges-immediate-patching-of-critical-netscaler-vulnerability/1b7gi85Fri, 09 Oct 2026 06:53:53 GMTSecurityWeek (+2 more sources). The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.Vulnerability https://cyberscoop.com/citrix-netscaler-third-exploited-zero-day-vulnerability/10i6rudMon, 05 Oct 2026 23:07:17 GMTCyberScoop. The vendor was much quicker and consistent in its response to the latest defect, and researchers consider the impact relatively low compared to the previous pair of zero-days.Zero-day https://therecord.media/us-australia-warn-of-latest-citrix-vulnerabilityqxfkfMon, 05 Oct 2026 17:22:00 GMTThe Record. Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem was not connected to vulnerabilities reported last week that also caused alarm among cybersecurity…Vulnerability https://thehackernews.com/2026/10/weekly-recap-netscaler-and-fortimail-0.htmle2jj37Mon, 05 Oct 2026 14:20:43 GMTThe Hacker News. A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding leverage in small things that were easy to overlook. There are actively exploited bugs in the…VulnerabilityZero-dayBreachRansomwareAILaw & policy https://www.infosecurity-magazine.com/news/citrix-netscaler-zero-day/lmmw4hMon, 05 Oct 2026 13:30:00 GMTInfosecurity Magazine. The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal governmentVulnerabilityZero-day https://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/16njwdqSun, 04 Oct 2026 21:58:01 GMTBleepingComputer (+6 more sources). Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]VulnerabilityZero-dayResearch https://news.google.com/rss/articles/CBMidEFVX3lxTFBGWklEbFRpUWtUR0VLYlV1MTNOeGtiVnIteFlfZmJxT0czTkNqNG1uU1dmX1duaXVUYThvVXJTSWNIRnlDSEdQOXlaZzdsVll4VUcyMjk2VkNtdVI3cmtFZkxPSlFnUUwyM0JiMF9KTnNyZ2dm?oc=534hlaxSat, 03 Oct 2026 19:47:57 GMTDecipher. New Citrix NetScaler Issue Emerges decipher.sc https://decipher.sc/2026/10/03/new-citrix-netscaler-issue-emerges/1xgtg7mSat, 03 Oct 2026 17:29:03 GMTDecipher (+1 more sources). The vendor says this is a configuration-dependent issue rather than a failure of the security patches themselves.Vulnerability https://www.darkreading.com/cybersecurity-operations/kiteworks-citrix-incidents-challenges-zero-day-responsemr4jmsFri, 02 Oct 2026 16:56:30 GMTDark Reading. One company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported attacks prior to releasing a patch for its product.VulnerabilityZero-day https://thehackernews.com/2026/10/citrix-netscaler-post-exploitation.html1nudlh8Thu, 01 Oct 2026 04:35:34 GMTThe Hacker News. Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt theft of configuration data. LevelBlue's Threat Hunt Operations & Research…Vulnerability https://www.levelblue.com/blogs/spiderlabs-blog/citrix-netscaler-cve-2026-88771-observed-exploitation-artifacts-and-hunt-indicators69etnmWed, 30 Sep 2026 20:34:10 GMTLevelBlue SpiderLabs. With contributions from James Rodriguez, Gus Stamatinos, and Timmy Lister.ResearchVulnerability https://www.cybersecuritydive.com/news/exploitation-citrix-netscaler-what-we-know/831780/b2hyg8Wed, 30 Sep 2026 15:25:34 GMTCybersecurity Dive. Suspected state-linked actors targeted critical vulnerabilities in the widely used platform, causing widespread disruption across Europe and North America.VulnerabilityZero-day https://thehackernews.com/2026/09/attackers-exploit-netscaler-flaw-for.htmln08ge8Wed, 30 Sep 2026 08:24:35 GMTThe Hacker News. Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat…Vulnerability https://cyberscoop.com/citrix-netscaler-zero-day-attacks-three-weeks-undetected/lgn8gTue, 29 Sep 2026 21:30:22 GMTCyberScoop. Mandiant researchers said dozens of organizations have been impacted by attacks attributed to advanced and suspected state-sponsored threat groups. They expect more attacks to come.Zero-dayAPT https://www.theregister.com/security/2026/09/29/custom-malware-used-in-citrix-0-day-attacks-targeting-govt-banks-professional-services/52998671e89vvxTue, 29 Sep 2026 17:49:45 GMTThe Register. Two questions remain: who is abusing the CVEs? And why did Citrix take so long to disclose?Zero-dayMalware https://www.cybersecuritydive.com/news/citrix-netscaler-exploitation-days-before-notification/831634/u10r56Tue, 29 Sep 2026 15:06:19 GMTCybersecurity Dive. Customers need to check systems for compromise prior to patching, because the security upgrade may not fully resolve an infected system. https://decipher.sc/2026/09/29/inside-the-citrix-netscaler-zero-day-saga/1eu3yaTue, 29 Sep 2026 14:55:40 GMTDecipher. This case is yet another reminder just how important vendor communication is in such incidents and how much uncertainty can hamper security.Zero-day https://www.darkreading.com/vulnerabilities-threats/netscaler-zero-days-chaos-citrix9m7n9tTue, 29 Sep 2026 14:19:43 GMTDark Reading. The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.VulnerabilityZero-day https://labs.watchtowr.com/here-we-go-again-citrix-netscaler-dtls-preauth-memory-overflow-cve-2026-88772/19vqu8vTue, 29 Sep 2026 13:56:37 GMT0dayfans. Part 1 of this week's saga can be found here. This research is a glimpse into the capabilities that power our Preemptive Exposure Management solution, enabling organizations to rapidly react to emerging threats: the watchTowr Platform. What Is A Citrix…AdvisoryVulnerability https://news.google.com/rss/articles/CBMiiAFBVV95cUxQdTllU2VSRGFuVkdRMjhIVXBza2EtZFl2UURUWnlhbXZXdEp4TlJxaXNWYkRPamdzUVB1bk5MXzBpenl3QXB3U2traTQyYlpsVkQ0N3ZSbFpuS2hGQzRjQ25uNmgzUzZLWmttVUppclhZZG9tRUFrVUJwemM1Y0tneUhuNXBqUWxh?oc=5fxb71eTue, 29 Sep 2026 07:00:00 GMTDecipher. Researchers Warn of Citrix NetScaler Exploitation decipher.sc https://cyberscoop.com/citrix-zero-days-delayed-disclosure/1u5wxfhTue, 29 Sep 2026 00:58:15 GMTCyberScoop. The vendor’s products are a common, recurring target for attackers, yet the official warning for some Citrix NetScaler customers was too late.VulnerabilityZero-day https://www.cybersecuritydive.com/news/citrix-upgrades-netscaler-exploitation/831502/108rpkyMon, 28 Sep 2026 15:20:27 GMTCybersecurity Dive. Security teams received urgent calls to disconnect servers before authorities confirmed critical zero-day flaws.VulnerabilityZero-day https://www.infosecurity-magazine.com/news/citrix-patches-critical-zero-days/z2l8ntMon, 28 Sep 2026 08:30:00 GMTInfosecurity Magazine. Citrix has confirmed exploitation of two critical zero-day RCE bugsVulnerabilityZero-day https://www.theregister.com/security/2026/09/28/certainties-in-life-death-taxes-and-critical-citrix-vulns-under-attack/5299369sm9l68Mon, 28 Sep 2026 06:49:03 GMTThe Register. Sunday NetScaler patch dump fixes trio of critical vulns and five more serious messesVulnerability https://www.greynoise.io/blog/swarming-against-citrix-0-day-exploitation20ul0rMon, 28 Sep 2026 00:00:00 GMTGreyNoise. On 24 September 2026, a malicious cyber actor (MCA) used 149.104.78.141 to attempt zero-day exploitation against a Citrix NetScaler Gateway. At the time, there were no CVE-specific detections for the attack due to it occurring pre-disclosure. However,…ResearchZero-day https://decipher.sc/2026/09/27/researchers-warn-of-citrix-netscaler-exploitation/zcxlxrSun, 27 Sep 2026 14:05:55 GMTDecipher (+14 more sources). On Saturday, researchers from watchTowr Labs said they had credible information that attackers were exploiting an unknown RCE vulnerability in Citrix NetScaler boxes.AdvisoryVulnerabilityZero-dayResearch