Home / Sep 29, 2026 / Story
0
#2 SecurityWeek general September 28, 2026 at 07:29 UTC

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

By Eduard Kovacs

AI Summary

Citrix officially confirmed and released patches for two NetScaler zero-days tracked as CVE-2026-88771 and CVE-2026-88772, which were being actively exploited before patches were available — prompting some administrators to preemptively take systems offline. The delayed official response, with incident responders warning of exploitation on Saturday before Citrix confirmed eight new vulnerabilities, underscores the persistent targeting of NetScaler Gateway products by threat actors.

Relevance score: 91.0/100

# More from September 29

  1. 8
    New Attack Against RSA Schneier on Security