Citrix

Citrix has issued a critical alert to IT administrators, urging them to immediately patch systems affected by a newly discovered vulnerability in its NetScaler Application Delivery Controller (ADC) networking appliances and NetScaler Gateway secure remote access solutions.

Citrix has issued critical security patches for its NetScaler ADC (Application Delivery Controller) and NetScaler Gateway products, addressing a significant vulnerability identified as CVE-2026-107406. This flaw, characterized as a memory overflow issue, carries the potential to enable remote code execution…

Citrix has issued security advisories and patches for a critical zero-day vulnerability affecting its NetScaler ADC and NetScaler Gateway products. This flaw, identified as CVE-2026-88779, has already been actively exploited in targeted cyberattacks, posing a significant risk to organizations relying…

Citrix has issued urgent security patches to address a critical zero-day vulnerability affecting its NetScaler application delivery controller and network gateway products. The vulnerability, officially designated as CVE-2026-88779, specifically targets the SAML (Security Assertion Markup Language) authentication service within NetScaler.

Threat actors are actively exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway, enabling them to deploy web shells and exfiltrate sensitive configuration data. The LevelBlue Threat Hunt Operations & Research (THOR) team observed…

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. This exploitation activity, identified by Mandiant Consulting and the Google Threat Intelligence…

Cybersecurity researchers have disclosed detailed technical information regarding a critical security vulnerability in Citrix NetScaler ADC and Gateway, identified as CVE-2026-88772. This flaw, which has been actively exploited in the wild, was recently patched by Citrix.

Cybersecurity researchers have identified that malicious actors successfully exploited a previously unknown zero-day vulnerability in Citrix NetScaler appliances, identified by the Common Vulnerabilities and Exposures identifier CVE-2026-88772. This exploitation allowed attackers to deploy custom web shells, a type of malicious…

A domain previously used as a harmless placeholder text has been hijacked, leading to the serving of malicious lures to approximately 1,700 code repositories. This incident highlights how forgotten assumptions can transform into active attack surfaces for malicious actors.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Sunday, March 10, 2024, that it has added two critical vulnerabilities affecting Citrix NetScaler Application Delivery Controller (ADC) and Gateway products to its Known Exploited Vulnerabilities (KEV) catalog.

The Cybersecurity and Infrastructure Security Agency (CISA) issued a directive over the weekend, compelling U.S. federal civilian executive branch agencies to patch two critical vulnerabilities affecting Citrix NetScaler appliances. These vulnerabilities, identified as CVE-2023-4966 and CVE-2023-4967, are being actively exploited…

Citrix administrators have been urgently advised to disconnect their NetScaler appliances from the internet due to the active exploitation of two critical zero-day vulnerabilities. These flaws, identified as CVE-2023-4966 and CVE-2023-4967, pose a significant security risk, allowing attackers to potentially…

Two critical unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances are currently being actively exploited in the wild, allowing for remote code execution. Security firm watchTowr disclosed this threat on September 26, highlighting the immediate risk…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday, August 28, 2024, officially added three significant cybersecurity vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These flaws impact widely used products from major technology vendors Cisco, Citrix, and Fortinet.

Attackers have commenced exploiting a critical-severity authentication bypass vulnerability affecting Citrix NetScaler appliances in live attacks, as reported by vulnerability intelligence firm Previdian. The specific vulnerability is identified by the Common Vulnerabilities and Exposures (CVE) identifier CVE-2026-19490.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive mandating all federal civilian executive branch agencies to patch a critical remote code execution (RCE) vulnerability affecting Citrix NetScaler appliances.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Wednesday, citing evidence of active exploitation. This action mandates that federal agencies patch these vulnerabilities by a specific deadline to mitigate…

Citrix has issued urgent updates to resolve two significant security vulnerabilities affecting its NetScaler Application Delivery Controller (ADC) and NetScaler Gateway products. The most critical of these is an authentication bypass flaw that allows unauthorized access to protected resources.

Citrix has issued an urgent warning to its customers, advising them to immediately patch two critical vulnerabilities that affect its NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances.

This week's cybersecurity landscape is marked by the exploitation of trusted software, with attackers leveraging advanced tools, including AI, to identify and exploit vulnerabilities at an unprecedented pace. The ShareFile platform has been identified as a target, with threat actors…