Netscaler News Articles

NetScaler builds that fixed zero-days carry critical flaw, too

Key points Citrix has disclosed CVE-2026-107406, a critical memory overflow in NetScaler ADC and Gateway builds that patched last month's exploited flaws, scoring 9.5 on CVSS v4.0. Appliances configured for...

3 days ago

Citrix warns admins to patch new NetScaler RCE flaw immediately

Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions.

6 days ago

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix patched CVE-2026-107406, a critical NetScaler memory overflow that could allow RCE or DoS in deployments configured for SAML.

6 days ago

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

Citrix urges customers to immediately patch CVE-2026-107406, a critical NetScaler vulnerability leading to remote code execution.

1 week ago

Citrix discloses third actively exploited NetScaler zero-day in less than a week

The vendor was much quicker and consistent in its response to the latest defect, and researchers consider the impact relatively low compared to the previous pair of zero-days.

1 week ago

Citrix NetScaler security snafus get even worse amid more 0-day reports

The new vuln, CVE-2026-88779, is a memory overflow bug that leads to denial of service

1 week ago

Citrix NetScaler security snafus get even worse amid more 0-day reports

The new vuln, CVE-2026-88779, is a memory overflow bug that leads to denial of service

1 week ago

(TLP:CLEAR) Vulnerability Notification - Citrix NetScaler SAML Zero-Day Actively Exploited  - WaterISAC

ACTION MAY BE REQUIRED for utilities using customer-managed Citrix NetScaler ADC or NetScaler Gateway appliances configured as a SAML service provider (SP) or SAML identity provider (IdP), including Secure...

1 week ago

CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779) - IT Security News

2026-10-05 17:10 CISA has added another Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog on Sunday: CVE-2026-88779, a memory overflow bug that may cripple...

1 week ago

CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779) - Help Net Security

CVE-2026-88779, a memory overflow bug that can cripple vulnerable NetScaler ADCs and Gateways, has been added to CISA's KEV catalog.

1 week ago

CISA Warns of Citrix NetScaler Vulnerability Actively Exploited in Attacks - IT Security News

2026-10-05 16:10 The U.S. Cybersecurity and Infrastructure Security Agency has added a Citrix NetScaler vulnerability, tracked as CVE-2026-88779, to its Known Exploited Vulnerabilities...

1 week ago

CISA Warns of Citrix NetScaler Vulnerability Actively Exploited in Attacks

CISA added Citrix NetScaler flaw CVE-2026-88779 to its KEV catalog after confirming active exploitation in NetScaler ADC and Gateway.

1 week ago

Citrix NetScaler Targeted Via New Zero Day

The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal government

1 week ago

CISA Flags Citrix NetScaler Flaw Exploited in Ongoing Attacks - IT Security News

2026-10-05 13:10 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-88779, a high-severity vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway...

1 week ago

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix patches CVE-2026-88779 after targeted zero-day attacks caused denial-of-service on SAML-enabled NetScaler deployments.

1 week ago

Citrix NetScaler SAML 0-Day Vulnerability Actively Exploited in Attacks

Citrix has released emergency security updates for a NetScaler SAML zero-day vulnerability that attackers are actively exploiting. Tracked as CVE-2026-88779, the flaw affects customer-managed NetScaler ADC and NetScaler Gateway appliances and can cause denial of service, disrupting access to service...

2 weeks ago

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

Citrix NetScaler instances are being targeted via CVE-2026-88779, a zero-day vulnerability exploited against fully patched instances.

2 weeks ago

Citrix patches NetScaler SAML zero-day exploited in attacks

Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution.

2 weeks ago

Citrix admins warned to shut down NetScalers over 2 exploited zero-days

Two unpatched Citrix NetScaler zero-day vulnerabilities are reportedly being exploited in attacks, with cybersecurity agencies, security researchers, and IT providers privately warning organizations about the flaws ahead of patches expected next week.

3 weeks ago

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline - SwapUpdate

Ravie LakshmananSep 10, 2026Vulnerability / Network Security

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

CISA adds three exploited Cisco, Citrix, and Fortinet flaws to KEV, requiring federal agencies to patch by September 12, 2026.

Critical NetScaler Vulnerability Exploited in Attacks

Hackers have been exploiting CVE-2026-19490, a critical authentication bypass vulnerability in NetScaler, since at least September 3.

Critical Citrix NetScaler auth bypass now leveraged in attacks

Attackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability intelligence company Previdian.

Citrix Builds Linux Recovery OS Into Windows PCs to Beat Ransomware and Outages

Citrix UniconOS dual boot adds a hardened Linux OS alongside Windows on the same disk. Users reboot into the isolated environment to access apps via DaaS and SecurAccess while IT remediates ransomware or corruption. The feature scales recovery without spare hardware.

CISA Warns of Citrix NetScaler ADC and Gateway Vulnerability Exploited in Attacks

CISA added critical Citrix NetScaler flaw CVE-2026-8452 to its KEV catalog after confirming exploitation.