Citrix patches NetScaler SAML zero-day exploited in attacks

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.7.

Jak se o tom psalo 10

1. 8. 10. 2026 20:00 · Cisco Talos US

   Making sure the checks get printed

   Welcome to this week’s edition of the Threat Source newsletter. My name is Pierre Cadieux, and I’ll be helping contribute to these newsletters. A little about me: I’ve been working in the cybersecurity industry in many roles over the past 20+ years, first focusing on endpoint security, policies, and firewalls, then moving to risk management and compliance, disaster recovery, and investigations. I spent about 15 years as a consultant working across many well-known consultancy firms and…

2. 5. 10. 2026 19:22 · The Record US

   US, Australia warn of latest Citrix vulnerability after NetScaler advisory

   Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem was not connected to vulnerabilities reported last week that also caused alarm among cybersecurity experts.

3. 5. 10. 2026 13:45 · Cyber Centre Kanada CA

   Citrix security advisory (AV26-996)

   Serial Number: AV26-996 Date: October 5, 2026 As of October 4, 2026, Citrix is affected by a vulnerability in the following products: NetScaler ADC Prior to 13.1-37.282 Prior to 13.1-64.28 Prior to 14.1-73.41 Prior to 14.1-73.41 FIPS NetScaler Gateway Prior to 13.1-64.28 Prior to 14.1-73.41 Citrix indicates that CVE-2026-88779 is exploited in the wild. On October 4, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-88779 to their Known Exploited Vulnerabilities (KEV)…

4. 5. 10. 2026 · zachyceno 04:00 · NCSC-FI FI

   Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779

   Classification: Severe, Solution: Official Fix, Exploit Maturity: High, CVSSv4.0: 8.7, CVEs: CVE-2026-88779, Summary: A vulnerability has been discovered in Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway). The following supported versions of NetScaler are affected by the vulnerability: Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 BEFORE 14.1-73.41 Citrix NetScaler ADC and Citrix NetScaler Gateway 13.1 BEFORE 13.1-64.28 Citrix NetScaler…

5. 5. 10. 2026 · zachyceno 16:00 · Sophos Threat Research GB

   Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation

   Categories: Threat Research Tags: advisory, vulnerability, Citrix

6. 5. 10. 2026 · zachyceno 16:00 · CERT-FR – avis FR

   Vulnérabilité dans Citrix NetScaler ADC et Gateway (05 octobre 2026)

   Une vulnérabilité a été découverte dans Citrix NetScaler ADC et Gateway. Elle permet à un attaquant de provoquer un déni de service à distance. La CISA indique que la vulnérabilité CVE-2026-88779 est activement exploitée.

7. 4. 10. 2026 23:58 · BleepingComputer US nadpis události

   Citrix patches NetScaler SAML zero-day exploited in attacks

   Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]

8. 4. 10. 2026 19:05 · CSIRT Itálie (ACN) IT

   Vulnerabilità in prodotti Citrix NetScaler

   Citrix ha rilasciato aggiornamenti di sicurezza per ADC e Gateway, prodotti NetScaler dedicati alla distribuzione, gestione e accesso sicuro ad applicazioni e servizi, che risolvono una vulnerabilità con gravità “alta”, identificata tramite la CVE-2026-88779.

9. 4. 10. 2026 13:19 · NCSC-NL NL

   NCSC-2026-0399 [1.00] [M/H] Kwetsbaarheid verholpen in Citrix NetScaler ADC en NetScaler Gateway

   Citrix heeft een kwetsbaarheid verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid betreft een geheugenoverflow in versies van NetScaler ADC en NetScaler Gateway die ouder zijn dan 14.1-73.41 en 13.1-64.28. Deze kwetsbaarheid kan leiden tot een Denial of Service (DoS) waarbij de normale beschikbaarheid van de dienst wordt verstoord.

10. 4. 10. 2026 · zachyceno 22:00 · CISA KEV US

    Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779)

    CISA added CVE-2026-88779 to the Known Exploited Vulnerabilities catalog. Affected product: Citrix NetScaler. Remediation due date: 2026-10-07.