Citrix

Security news, advisories and exploited vulnerabilities.

Actively exploited (CISA KEV)

CVEs in the news

Timeline (last 30 days)

• CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability — Zscaler ThreatLabz, 2026-10-16
• Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems — Cybersecurity News, 2026-10-15
• Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems — Cybersecurity News, 2026-10-15
• Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products — SecurityWeek, 2026-10-14
• CISA Warns of Hackers Exploiting Two Citrix NetScaler 0-Days to Execute Code Remotely — Cybersecurity News, 2026-10-13
• Hackers Exploit Citrix NetScaler 0-Days to Deploy Platypus Remote Access Tool — Cybersecurity News, 2026-10-13
• CISA calls on Citrix NetScaler customers to patch as new flaws disclosed — Cybersecurity Dive, 2026-10-12
• Citrix gives NetScaler admins another critical reason to patch — The Register, 2026-10-09
• Citrix warns admins to patch new NetScaler RCE flaw immediately — BleepingComputer, 2026-10-09
• Citrix Urges Immediate Patching of Critical NetScaler Vulnerability — SecurityWeek +2 sources, 2026-10-09
• Citrix discloses third actively exploited NetScaler zero-day in less than a week — CyberScoop, 2026-10-05
• US, Australia warn of latest Citrix vulnerability after NetScaler advisory — The Record, 2026-10-05
• ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests — The Hacker News, 2026-10-05
• Citrix NetScaler Targeted Via New Zero Day — Infosecurity Magazine, 2026-10-05
• Citrix patches NetScaler SAML zero-day exploited in attacks — BleepingComputer +6 sources, 2026-10-04
• New Citrix NetScaler Issue Emerges — Decipher, 2026-10-03
• New Citrix NetScaler Issue Emerges — Decipher +1 sources, 2026-10-03
• Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response — Dark Reading, 2026-10-02
• Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs — The Hacker News, 2026-10-01
• Citrix NetScaler CVE-2026-88771: Observed Exploitation Artifacts and Hunt Indicators — LevelBlue SpiderLabs, 2026-09-30
• Mass exploitation of Citrix NetScaler: What we currently know — Cybersecurity Dive, 2026-09-30
• Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT — The Hacker News, 2026-09-30
• Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected — CyberScoop, 2026-09-29
• Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services — The Register, 2026-09-29
• Citrix NetScaler exploitation began days before public notification — Cybersecurity Dive, 2026-09-29
• Inside the Citrix NetScaler Zero Day Saga — Decipher, 2026-09-29
• Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers — Dark Reading, 2026-09-29
• Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) — 0dayfans, 2026-09-29
• Researchers Warn of Citrix NetScaler Exploitation — Decipher, 2026-09-29
• Citrix patches actively exploited NetScaler zero-days after a weekend of unofficial warnings — CyberScoop, 2026-09-29
• Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts — Cybersecurity Dive, 2026-09-28
• Citrix Patches Critical Zero Days Under Active Exploitation — Infosecurity Magazine, 2026-09-28
• Certainties in life: Death, taxes, and critical Citrix vulns under attack — The Register, 2026-09-28
• Swarming Against Citrix 0-Day Exploitation — GreyNoise, 2026-09-28
• Researchers Warn of Citrix NetScaler Exploitation — Decipher +14 sources, 2026-09-27