cyberpress

Multiple Citrix UniconOS and XenServer Flaws Let Attackers Escalate Privileges and Compromise Hosts

Citrix disclosed seven vulnerabilities in UniconOS and XenServer that could enable local privilege escalation, persistent ...
Cyber Security News

Hackers Exploit Citrix NetScaler 0-Days to Deploy Platypus Remote Access Tool

Two Citrix NetScaler zero-days are exploited to deploy a modified Platypus remote access tool on vulnerable appliances.
Security Affairs

CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability

Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks.
Cyber Security News

Hackers Exploit Critical Citrix NetScaler Flaw to Deploy Web Shells and Steal Configuration Data

Hackers exploit critical Citrix NetScaler flaw CVE-2026-88771 to run commands, install web shells and steal configuration data.

[Urgent Notice] New Active Exploitation Vulnerability in NetScaler—CISA Adds to Emergency Catalog, Server Administrators Must Respond by October 7 (CVE-2026-88779)

IntroductionSerious news continues for environments operating Citrix NetScaler.On Sunday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a new NetScaler vulnerability, CVE-2026 ...

Citrix patches NetScaler SAML zero-day exploited in attacks

Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether ...
heise online

Update Citrix Netscaler now: Zero-day causes crashes and code execution

Since the evening of October 2, 2026, an exploit for a new security vulnerability on Citrix NetScaler devices has apparently been circulating. The manufacturer warns in a blog post, security ...
Dark Reading

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

On Sept. 24, threat detection firm GreyNoise Intelligence observed a single US-based IP address scanning for Citrix NetScaler installations and conducting remote code execution (RCE) attacks. The ...
techtimes

Citrix NetScaler Zero-Days Spread Mass Exploitation: Patching Won’t Remove Backdoors

A sign is posted on the exterior of a Citrix office complex on January 31, 2022 in Santa Clara, California. Justin Sullivan/Getty Images A covert espionage campaign against enterprise network ...
Help Net Security

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has escalated. What started as stealthy targeting via zero-day exploits has now become widespread “spray and ...

Hackers exploit Citrix NetScaler zero-day to deploy web shells

Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into ...
Dark Reading

Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

Citrix on Sept. 27 disclosed two critical NetScaler zero-day vulnerabilities after reports of exploitation had caused alarm among customers for several days. CVE-2026-88771 is a remote code execution ...