Citrix warns admins to patch new NetScaler RCE flaw immediately

CVE v události 4

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.5.

Tahle CVE jsem vytáhl z širšího textu článku: CVE-2026-3055, CVE-2026-4368, CVE-2026-88772. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.

Jak se o tom psalo 16

1. 9. 10. 2026 15:31 · Cyber Centre Kanada CA

   Citrix security advisory (AV26-1023)

   Serial Number: AV26-1023 Date: October 9, 2026 NetScaler ADC and NetScaler Gateway Prior to 13.1-64.29 Prior to 14.1-73.46 NetScaler ADC FIPS Prior to 14.1-73.46 FIPS Prior to 13.1-37.283 FIPS & NDcPP The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-107406 Citrix Security Advisories

2. 9. 10. 2026 10:54 · CERT.at AT

   Weitere kritische Sicherheitslücke in Citrix NetScaler ADC und NetScaler Gateway - Updates verfügbar

   09. Oktober 2026 Beschreibung Citrix hat ein Security Bulletin zu einer kritischen Sicherheitslücke in Citrix NetScaler ADC und Citrix NetScaler Gateway veröffentlicht. Es handelt sich um einen Speicherüberlauf, der zur Ausführung von beliebigem Code aus der Ferne (Remote Code Execution) oder zu einem Denial-of-Service (DoS) führen kann. Voraussetzung ist, dass das Gerät als SAML Service Provider (SP) oder SAML Identity Provider (IdP) konfiguriert ist. Betroffen sind auch Systeme, die bereits…

3. 9. 10. 2026 10:27 · BleepingComputer US nadpis události

   Citrix warns admins to patch new NetScaler RCE flaw immediately

   Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. [...]

4. 9. 10. 2026 09:56 · CSIRT Itálie (ACN) IT

   Rilevata vulnerabilità in prodotti Citrix NetScaler

   Citrix ha rilasciato aggiornamenti di sicurezza per risolvere una vulnerabilità con gravità "critica" presente nei prodotti NetScaler ADC e Gateway. Tale vulnerabilità, sfruttabile solo quando le funzionalità SAML sono abilitate sui prodotti target, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario o di compromettere la disponibilità del servizio sui sistemi interessati.

5. 9. 10. 2026 09:15 · NCSC-NL NL

   NCSC-2026-0410 [1.00] [M/H] Kwetsbaarheid verholpen in Citrix NetScaler ADC en Gateway

   Citrix heeft een kwetsbaarheid verholpen in NetScaler ADC en Gateway producten wanneer deze zijn geconfigureerd als SAML Service Provider (SP) of Identity Provider (IdP). De kwetsbaarheid betreft een geheugenoverflow die optreedt tijdens de verwerking van SAML. Deze kan op afstand worden geactiveerd, waardoor een aanvaller willekeurige code kan uitvoeren of een denial of service kan veroorzaken. De kwetsbaarheid ontstaat door onjuiste geheugenafhandeling tijdens SAML-verwerking.

6. 9. 10. 2026 · zachyceno 16:00 · CERT-FR – avis FR

   Vulnérabilité dans Citrix NetScaler ADC et Gateway (09 octobre 2026)

   Une vulnérabilité a été découverte dans Citrix NetScaler ADC et Gateway. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.

7. 8. 10. 2026 20:00 · Cisco Talos US

   Making sure the checks get printed

   Welcome to this week’s edition of the Threat Source newsletter. My name is Pierre Cadieux, and I’ll be helping contribute to these newsletters. A little about me: I’ve been working in the cybersecurity industry in many roles over the past 20+ years, first focusing on endpoint security, policies, and firewalls, then moving to risk management and compliance, disaster recovery, and investigations. I spent about 15 years as a consultant working across many well-known consultancy firms and…

8. 5. 10. 2026 19:22 · The Record US

   US, Australia warn of latest Citrix vulnerability after NetScaler advisory

   Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem was not connected to vulnerabilities reported last week that also caused alarm among cybersecurity experts.

9. 5. 10. 2026 13:45 · Cyber Centre Kanada CA

   Citrix security advisory (AV26-996)

   Serial Number: AV26-996 Date: October 5, 2026 As of October 4, 2026, Citrix is affected by a vulnerability in the following products: NetScaler ADC Prior to 13.1-37.282 Prior to 13.1-64.28 Prior to 14.1-73.41 Prior to 14.1-73.41 FIPS NetScaler Gateway Prior to 13.1-64.28 Prior to 14.1-73.41 Citrix indicates that CVE-2026-88779 is exploited in the wild. On October 4, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-88779 to their Known Exploited Vulnerabilities (KEV)…

10. 5. 10. 2026 · zachyceno 04:00 · NCSC-FI FI

    Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779

    Classification: Severe, Solution: Official Fix, Exploit Maturity: High, CVSSv4.0: 8.7, CVEs: CVE-2026-88779, Summary: A vulnerability has been discovered in Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway). The following supported versions of NetScaler are affected by the vulnerability: Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 BEFORE 14.1-73.41 Citrix NetScaler ADC and Citrix NetScaler Gateway 13.1 BEFORE 13.1-64.28 Citrix NetScaler…

11. 5. 10. 2026 · zachyceno 16:00 · Sophos Threat Research GB

    Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation

    Categories: Threat Research Tags: advisory, vulnerability, Citrix

12. 5. 10. 2026 · zachyceno 16:00 · CERT-FR – avis FR

    Vulnérabilité dans Citrix NetScaler ADC et Gateway (05 octobre 2026)

    Une vulnérabilité a été découverte dans Citrix NetScaler ADC et Gateway. Elle permet à un attaquant de provoquer un déni de service à distance. La CISA indique que la vulnérabilité CVE-2026-88779 est activement exploitée.

13. 4. 10. 2026 23:58 · BleepingComputer US

    Citrix patches NetScaler SAML zero-day exploited in attacks

    Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]

14. 4. 10. 2026 19:05 · CSIRT Itálie (ACN) IT

    Vulnerabilità in prodotti Citrix NetScaler

    Citrix ha rilasciato aggiornamenti di sicurezza per ADC e Gateway, prodotti NetScaler dedicati alla distribuzione, gestione e accesso sicuro ad applicazioni e servizi, che risolvono una vulnerabilità con gravità “alta”, identificata tramite la CVE-2026-88779.

15. 4. 10. 2026 13:19 · NCSC-NL NL

    NCSC-2026-0399 [1.00] [M/H] Kwetsbaarheid verholpen in Citrix NetScaler ADC en NetScaler Gateway

    Citrix heeft een kwetsbaarheid verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid betreft een geheugenoverflow in versies van NetScaler ADC en NetScaler Gateway die ouder zijn dan 14.1-73.41 en 13.1-64.28. Deze kwetsbaarheid kan leiden tot een Denial of Service (DoS) waarbij de normale beschikbaarheid van de dienst wordt verstoord.

16. 4. 10. 2026 · zachyceno 22:00 · CISA KEV US

    Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779)

    CISA added CVE-2026-88779 to the Known Exploited Vulnerabilities catalog. Affected product: Citrix NetScaler. Remediation due date: 2026-10-07.