Hackers exploit Citrix NetScaler zero-day to deploy web shells

Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into ...

CISA orders feds to patch exploited Citrix flaws by Wednesday

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler ...
cybersecuritynews

Citrix NetScaler Keeps Rebooting Following the 0-Day Patch

Citrix NetScaler customers are reporting repeated appliance reboots after installing build 14.1-73.37, the emergency update released for two zero-day flaws under active attack. The failures appear ...
securityaffairs

Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day

Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code. Citrix confirmed that two critical zero-day ...
SecurityWeek

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

Over the weekend, Citrix rushed out patches for two critical NetScaler zero-day vulnerabilities that have been exploited in the wild. The company’s advisory covers eight vulnerabilities affecting ...
cybersecuritynews

Citrix NetScaler SAML 0-Day Vulnerability Actively Exploited in Attacks

Citrix has released emergency security updates for a NetScaler SAML zero-day vulnerability that attackers are actively exploiting. Tracked as CVE-2026-88779, the flaw affects customer-managed ...
cybersecuritydive

Citrix NetScaler exploitation began days before public notification

Exploitation activity linked to zero-day vulnerabilities in Citrix NetScaler were initially detected on Thursday, days before public disclosure, according to a report Monday from GreyNoise. A ...
SecurityWeek

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

Citrix NetScaler administrators scrambled over the weekend to protect their appliances after exploitation of a new zero-day vulnerability began. Administrators initially reported reboots of fully ...
cybersecuritydive

Mass exploitation of Citrix NetScaler: What we currently know

Government authorities and security teams are racing to assess the fallout from a campaign aimed at critical flaws in Citrix NetScaler. Government agencies and critical infrastructure providers were ...
cisa

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

CISA added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog on Sept. 27, 2026. Both are critical, zero-day vulnerabilities that can independently enable remote ...
IT News For Australia Business

Citrix confirms exploitation of Netscaler zero-day bugs

Citrix has confirmed Netscaler ADC and Gateway devices are under active attack and issued urgent updates for the vulnerabilities. CVE-2026-88771 and CVE-2026-88772 are both rated 9.5 and allow remote ...
cyberpress

Citrix Confirms NetScaler Zero-Day RCE Flaws Actively Exploited in Attacks

Citrix has issued emergency security updates for NetScaler ADC and NetScaler Gateway after confirming active exploitation of two critical zero-day remote code execution vulnerabilities. The flaws, ...