Skip to main content

Tag: citrix netscaler

8 articles

Rack-mounted Citrix NetScaler appliance with status lights and LCD display in a network operations room.

Citrix NetScaler Exploited in Active Attacks Amid New 0-Day Reports

Citrix NetScaler is under active attack, with hackers exploiting a newly discovered vulnerability that can cause denial of service with just a single specially crafted request. The flaw, known as CVE-2026-88779, affects certain NetScaler deployments configured for single sign-on authentication.

Analyst 207
Rows of computer servers and networking equipment, including a Citrix NetScaler appliance, in a data center room.

Citrix NetScaler Exploits Create Superuser, Deploy Web Shells

A critical vulnerability in Citrix NetScaler ADC and Gateway appliances, rated 9.5 in severity, is being actively exploited by attackers, who can use it to run malicious commands and gain superuser access. This urgent threat prompted the Dutch National Cyber Security Centre to advise organizations to shut down their appliances until they're patched.

Analyst 207
Rows of computer servers and networking equipment in a data center, with a Citrix NetScaler appliance prominently displayed…

Citrix NetScaler Flaw Exploited for Root Access, Web Shell Deployment

Security experts have uncovered a critical Citrix NetScaler flaw, CVE-2026-88772, that's being exploited to gain root access and deploy web shells, with attackers targeting ADC and Gateway appliances worldwide. This severe vulnerability, scoring 9.5 on the CVSS scale, allows for a devastating memory overflow that bypasses authentication and hands over total control.

Analyst 207
Network equipment and appliances on racks in a data center, with a prominent device resembling a Citrix NetScaler appliance…

Citrix NetScaler Flaw Exposes Pre-Auth Path to Shellcode Execution

A critical flaw in Citrix NetScaler appliances, tracked as CVE-2026-88772, has been patched after being exploited in the wild, allowing for remote code execution or denial-of-service attacks. This severe vulnerability, with a CVSS score of 9.5, was caused by a memory overflow in Datagram Transport Layer Security (DTLS) protocol handling.

Analyst 207
Modern office building exterior with slightly ajar door under clear blue sky.

Mandiant Exposes Citrix NetScaler Zero-Day Exploits by Suspected State Actors

Dozens of organizations across North America and Europe, spanning critical sectors like government, finance, and education, have been impacted by a massive cyberattack exploiting a zero-day vulnerability in Citrix NetScaler appliances. The stealthy campaign, suspected to be carried out by state actors, went undetected for at least three weeks, allowing attackers to compromise a wide range of industries.

Analyst 207
Technicians work in a daylight-flooded network operations center with rows of equipment and server racks.

CISA Warns of Global Exploitation of Citrix NetScaler Flaws

Threat actors are actively exploiting critical vulnerabilities in Citrix NetScaler ADC and Gateway worldwide, warns the U.S. Cybersecurity and Infrastructure Security Agency (CISA). These flaws, with a near-perfect CVSS score of 9.5, could allow attackers to execute arbitrary commands and wreak havoc on your systems.

Analyst 207
Technicians walk through a server room with rows of equipment racks and computer servers.

CISA Mandates Patching of Exploited Citrix NetScaler Flaw

Don't wait until it's too late: CISA has issued a directive requiring all Federal agencies to patch the exploited Citrix NetScaler flaw, CVE-2026-8452, by August 29 to avoid potential security breaches. This critical vulnerability is already being exploited in the wild, making swift action essential.

Analyst 207
Security operations center with large screen displaying system monitoring dashboard.

CISA Catalog Adds Six Exploited Flaws

Active exploitation is underway for six newly cataloged vulnerabilities, including a high-severity Citrix NetScaler flaw that's seen 36 exploitation attempts in just 12 days. The US Cybersecurity and Infrastructure Security Agency has added these flaws to its Known Exploited Vulnerabilities catalog, signaling urgent attention is needed.

Analyst 207