Netscaler News Articles

Citrix Builds Linux Recovery OS Into Windows PCs to Beat Ransomware and Outages

Citrix UniconOS dual boot adds a hardened Linux OS alongside Windows on the same disk. Users reboot into the isolated environment to access apps via DaaS and SecurAccess while IT remediates ransomware or corruption. The feature scales recovery without spare hardware.

16 hours ago

CISA Warns of Citrix NetScaler ADC and Gateway Vulnerability Exploited in Attacks

CISA added critical Citrix NetScaler flaw CVE-2026-8452 to its KEV catalog after confirming exploitation.

4 days ago

Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452) - IT Security News

2026-08-27 12:08 CISA added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a previously patched Citrix NetScaler ADC and Gateway flaw, tracked as...

4 days ago

Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452) - Help Net Security

Citrix NetScaler ADC and Gateway flaw CVE-2026-8452 is under active attack, with hackers dropping web shells days after a public PoC.

4 days ago

CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday

CISA has ordered U.S. government agencies to patch their Citrix NetScaler appliances against an actively exploited remote code execution vulnerability by Saturday.

4 days ago

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

CISA adds six exploited flaws to KEV, including a NetScaler bug tied to web shells and 36 exploitation attempts in 12 days.

4 days ago

Recent Citrix NetScaler Vulnerability Exploited in the Wild

Citrix NetScaler vulnerability tracked as CVE-2026-8452 has been exploited in the wild to deliver web shells, according to security firms.

5 days ago

Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Windows 11’s strongest security defenses can be bypassed

1 week ago

Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490) - Help Net Security

Citrix patched two vulnerabilities in NetScaler ADC and Gateway, including a critical bypass flaw, CVE-2026-19490.

1 week ago

Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490) - IT Security News

2026-08-21 10:08 Citrix has patched two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical authentication bypass flaw tracked as CVE-2026-19490, and is urging...

1 week ago

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

Citrix fixes NetScaler CVE-2026-19490, a CVSS 9.3 authentication bypass affecting certain Gateway, AAA, and SAML configurations.

2 weeks ago

Citrix urges admins to patch new NetScaler flaws as soon as possible

Citrix has warned customers to immediately secure their systems against two vulnerabilities affecting NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances.

2 weeks ago

Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler

Citrix has patched CVE-2026-19490, a critical-severity vulnerability in NetScaler leading to authentication bypass.

2 weeks ago

Citrix NetScaler Heap Overflow Flaw Lets Remote Attackers Execute Code as Root - PoC Released

Security researchers have published a working proof-of-concept (PoC) exploit demonstrating how a pre-authentication heap overflow in Citrix NetScaler ADC and NetScaler Gateway can be turned into unauthenticated root-level remote code execution (RCE).

2 weeks ago

CitrixBleed-ing Again? NetScaler Vulnerability Under Attack

Attackers wasted little time targeting the latest memory disclosure bug in Citrix NetScaler, after researchers published a proof-of-concept exploit.

CitrixBleed Vulnerability Exploitation Within 24 Hours of Disclosure - IT Security News

Citrix NetScaler appliances are currently facing significant threats due to the rapid exploitation of a newly disclosed memory disclosure vulnerability, CVE-2026-8451, which is part of the evolving “CitrixBleed” class. This high-severity flaw (CVSS 8.8), disclosed on June 30, 2026, in…Read more →

CitrixBleed Vulnerability Exploited by Hackers Within 24 Hours of Public Disclosure

A newly disclosed CitrixBleed-class vulnerability in Citrix NetScaler appliances came under active exploitation less than a day after public disclosure.

NetScaler Memory Overread Flaw Echoes CitrixBleed

A new NetScaler memory overread bug, CVE-2026-8451, leaks process data and revives CitrixBleed fears. Here is what admins need to patch and why it matters.

New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure

Hackers began exploiting vulnerability CVE-2026-8451 in Citrix NetScaler ADC and NetScaler Gateways less than 24 hours after disclosure.

Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

Security updates fix six NetScaler ADC and Gateway vulnerabilities, including 8.8-rated DoS bugs and unauthenticated file read.

Citrix Patches NetScaler Vulnerabilities, Including New ‘HTTP/2 Bomb’ Attack

Citrix has patched five NetScaler ADC and NetScaler Gateway vulnerabilities, including a high-severity defect similar to CitrixBleed.

Citrix patches a new NetScaler flaw with echoes of CitrixBleed

Citrix patched six NetScaler flaws, headlined by a high-severity memory disclosure bug (CVE-2026-8451) with striking similarities to CitrixBleed.

CVE-2026-8451: Citrix NetScaler Vulnerability Leaks Memory  | eSecurity Planet

CVE-2026-8451 is a Citrix NetScaler vulnerability that can leak process memory through specially crafted SAML requests.

Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug

CVE-2026-3055 targets Citrix NetScaler with active reconnaissance, risking data leaks on SAML IDP setups.

‘Advanced’ hacker seen exploiting Cisco, Citrix zero-days

The hackers notably used custom malware and were exploiting CVE-2025-5777 — now known colloquially as “Citrix Bleed Two” — before it was disclosed publicly in July.