World Cybersecurity NewsWorld Cybersecurity NewsHome

Topic

CVE-2026-88771

Hackers Exploit Two Critical Citrix NetScaler Zero-Days to Deploy Web Shells and Enable Lateral Movement
🇪🇸Hispasec•Sep 30

Hackers Exploit Two Critical Citrix NetScaler Zero-Days to Deploy Web Shells and Enable Lateral Movement

Vulnerabilities & Exploits
CISA Adds Two Critical Citrix NetScaler Flaws to Known Exploited Vulnerabilities Catalog
🇵🇹BoletimSec•Sep 29

CISA Adds Two Critical Citrix NetScaler Flaws to Known Exploited Vulnerabilities Catalog

Vulnerabilities & Exploits
CISA Sets September 30 Deadline for Federal Agencies to Patch Actively Exploited Citrix NetScaler Zero-Days
🇪🇸Hispasec•Sep 28

CISA Sets September 30 Deadline for Federal Agencies to Patch Actively Exploited Citrix NetScaler Zero-Days

Vulnerabilities & Exploits

Premium Weekly Digest

Exclusive cybersecurity analysis, straight to your inbox

Curated intelligence you won't find in the free feed. $9.99/week, cancel anytime.

Subscribe
🇯🇵Sep 28

Multiple Critical Vulnerabilities Found in Citrix NetScaler ADC and Gateway, Two Actively Exploited

Cloud Software Group disclosed eight vulnerabilities affecting NetScaler ADC and NetScaler Gateway products on September 27, 2026. Two of the issues, CVE-2026-88771 and CVE-2026-88772, have already been confirmed as exploited in the wild, prompting urgent remediation advice. CVE-2026-88771 stems from insufficient input validation and allows unauthenticated remote code execution across all default configurations. CVE-2026-88772 involves a memory overflow that can lead to code execution or denial of service when DTLS is enabled, which occurs by default on VPN vServers. The remaining six vulnerabilities cover code execution, denial of service, and HTTP request smuggling risks, with the advisory rated Critical overall. Organizations are urged to apply patches immediately and investigate potential breaches.

Security NEXT•Vulnerabilities & Exploits