Synthèse
On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of the...
On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of these 2 critical vulnerabilities in the wild. CERT-EU recommends updating affected software and running a compromise assessment on those exposed on the internet.
helpnetsecurity.com · 29 sept.
Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances ↗
cloud.google.com · 29 sept.
Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild ↗
unit42.paloaltonetworks.com · 28 sept.
Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) ↗
helpnetsecurity.com · 28 sept.
Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug ↗
securityweek.com · 28 sept.
Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day ↗
securityaffairs.com · 27 sept.
Citrix confirms two NetScaler RCE zero-days exploited in attacks ↗
bleepingcomputer.com · 27 sept.
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation ↗
thehackernews.com · 27 sept.