Citrix patches NetScaler SAML zero-day exploited in attacks

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.7.

Jak se o tom psalo 5

1. 5. 10. 2026 · zachyceno 04:00 · NCSC-FI FI

   Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779

   Classification: Severe, Solution: Official Fix, Exploit Maturity: High, CVSSv4.0: 8.7, CVEs: CVE-2026-88779, Summary: A vulnerability has been discovered in Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway). The following supported versions of NetScaler are affected by the vulnerability: Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 BEFORE 14.1-73.41 Citrix NetScaler ADC and Citrix NetScaler Gateway 13.1 BEFORE 13.1-64.28 Citrix NetScaler…

2. 4. 10. 2026 23:58 · BleepingComputer US nadpis události

   Citrix patches NetScaler SAML zero-day exploited in attacks

   Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]

3. 4. 10. 2026 19:05 · CSIRT Itálie (ACN) IT

   Vulnerabilità in prodotti Citrix NetScaler

   Citrix ha rilasciato aggiornamenti di sicurezza per ADC e Gateway, prodotti NetScaler dedicati alla distribuzione, gestione e accesso sicuro ad applicazioni e servizi, che risolvono una vulnerabilità con gravità “alta”, identificata tramite la CVE-2026-88779.

4. 4. 10. 2026 13:19 · NCSC-NL NL

   NCSC-2026-0399 [1.00] [M/H] Kwetsbaarheid verholpen in Citrix NetScaler ADC en NetScaler Gateway

   Citrix heeft een kwetsbaarheid verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid betreft een geheugenoverflow in versies van NetScaler ADC en NetScaler Gateway die ouder zijn dan 14.1-73.41 en 13.1-64.28. Deze kwetsbaarheid kan leiden tot een Denial of Service (DoS) waarbij de normale beschikbaarheid van de dienst wordt verstoord.

5. 4. 10. 2026 · zachyceno 22:00 · CISA KEV US

   Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779)

   CISA added CVE-2026-88779 to the Known Exploited Vulnerabilities catalog. Affected product: Citrix NetScaler. Remediation due date: 2026-10-07.