Eclypsium report details exploited flaws in firewalls, VPNs and network appliances
InfraTrust tracked 133 new advisories covering 2,813 vulnerabilities in a month; 16 advisories involved actively exploited KEV-listed flaws.
90
Product
NetScaler Gateway
- Mentions · 7d2
- Mentions · 30d38
- All mentions84
- First seenAug 17, 2026
- Last mentioned2d ago
Timeline
84 articles · newest firstActors exploited NetScaler zero-days before Citrix's weekend patches
Citrix fixed unauthenticated RCE flaws CVE-2026-88771 through CVE-2026-88778 after admins were urged to disconnect edge systems.
78
Attackers exploit Citrix NetScaler RCE CVE-2026-88771
Unauthenticated attackers poison logs, plant web shells and try to run a FreeBSD implant; CISA listed the flaw.
88
Attackers exploit Citrix NetScaler RCE to deploy web shells
Unauthenticated CVE-2026-88771, scored 9.5, is used to poison logs, run commands, and drop a FreeBSD payload.
88
Exploited NetScaler flaws allow command execution before login
CVE-2026-88771 works without authentication, including on default configurations; CVE-2026-88772 involves DTLS.
82
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
Attackers are actively exploiting critical unauthenticated NetScaler RCE CVE-2026-88771, now listed in CISA's KEV catalog.
86
September 2026 CVE Landscape
Recorded Future says 80 vulnerabilities were actively exploited in September 2026, including NetScaler zero-days.
85
12th October – Threat Intelligence Report
Check Point's weekly report covers a Denmark registry breach of 8.8 million people, ransomware, and exploited enterprise flaws.
82
Week in review: FortiBleed is still active, Patch Tuesday forecast
CISA added an exploited NetScaler flaw to KEV as Atlassian, Exchange, and SonicWall patches landed amid active attacks.
76
Citrix issues its weekly critical security patch for NetScaler ADC and NetScaler Gateway
Citrix patched critical NetScaler flaw CVE-2026-107406, a CVSS 9.5 memory overflow that can enable denial of service or code execution.
76
Citrix security advisory (AV26-1023)
Canada's Cyber Centre urges patches for Citrix NetScaler ADC and Gateway flaw CVE-2026-107406.
42
Citrix gives NetScaler admins another critical reason to patch
Citrix warns NetScaler ADC and Gateway CVE-2026-107406 can enable remote code execution, scoring CVSS 9.5.
74
CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability
Citrix patched critical NetScaler flaw CVE-2026-107406, which can allow remote code execution or denial of service.
78
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix urges immediate patches for critical NetScaler RCE CVE-2026-107406, with no known exploitation yet.
76
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
Citrix patched CVE-2026-107406, a CVSS 9.5 NetScaler memory overflow that can enable RCE on SAML deployments.
68
Critical Citrix NetScaler Vulnerability Allows Remote Code Execution Attacks – CVSS 9.5
Citrix disclosed CVE-2026-107406, a CVSS 9.5 NetScaler memory overflow that can allow remote code execution.
72
Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability
Citrix urges NetScaler ADC and Gateway customers to patch CVE-2026-107406, a critical SAML memory overflow enabling remote code execution.
72
Hackers Exploit Critical Citrix NetScaler Flaw to Deploy Web Shells and Steal Configuration Data
Attackers are exploiting critical NetScaler flaw CVE-2026-88771 to plant web shells and steal appliance configurations.
88
Critical Citrix NetScaler CVE-2026-88771 Exploited for Reverse Shells and Persistent Access
Attackers are exploiting critical Citrix NetScaler CVE-2026-88771 for reverse shells and persistent privileged access.
86
NetScaler C2: A Massive CVE-2026-88771 Exploitation Operation
SOCRadar reports a large Citrix NetScaler exploitation operation around CVE-2026-88771.
78
Citrix NetScaler security snafus get even worse amid more 0-day reports
Attackers are exploiting unpatched Citrix NetScaler CVE-2026-88779, a SAML memory overflow that causes denial of service.
86
US, Australia warn of latest Citrix vulnerability after NetScaler advisory
CISA orders agencies to patch actively exploited Citrix NetScaler flaw CVE-2026-88779, a confirmed denial-of-service bug.
84
CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)
CISA added actively exploited Citrix NetScaler CVE-2026-88779 to KEV after attacks crash ADC and Gateway appliances.
88
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
Citrix NetScaler and Fortinet FortiMail zero-days are under active attack, alongside ransomware arrests and new threat activity.
88
CISA Warns of Citrix NetScaler Vulnerability Actively Exploited in Attacks
CISA added actively exploited Citrix NetScaler CVE-2026-88779, a memory flaw that can deny service, to the KEV catalog.
80
CISA Warns of Citrix Vulnerability Active Exploitation in Attacks (CVE-2026-88779)
Citrix patched actively exploited NetScaler memory-overflow CVE-2026-88779, which CISA added to the KEV catalog.
76
Citrix NetScaler Targeted Via New Zero Day
Citrix NetScaler zero-day CVE-2026-88779 is under targeted attack and was added to CISA's KEV catalog.
82
U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog
CISA added exploited Citrix NetScaler flaw CVE-2026-88779 to KEV, with federal fixes due October 7.
80
Citrix warns of actively exploited NetScaler flaw days after zero-day patch rush
Citrix says CVE-2026-88779, a NetScaler memory-overflow DoS flaw, is under targeted attack and now in CISA’s KEV catalog.
80
Citrix security advisory (AV26-996)
Canada's Cyber Centre warns Citrix NetScaler CVE-2026-88779 is exploited and now on the CISA KEV list.
84
CISA Flags Citrix NetScaler Flaw Exploited in Ongoing Attacks
CISA added actively exploited Citrix NetScaler CVE-2026-88779, an unauthenticated denial-of-service flaw, to the KEV catalog.
80
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
Citrix patched exploited NetScaler CVE-2026-88779, a SAML memory overflow that can deny service.
82
Citrix NetScaler SAML 0-Day Vulnerability Actively Exploited in Attacks
Citrix patched actively exploited NetScaler SAML zero-day CVE-2026-88779, which can deny service on ADC and Gateway appliances.
82
Citrix patches NetScaler SAML zero-day exploited in attacks
Citrix patched actively exploited NetScaler SAML zero-day CVE-2026-88779 after crashes and possible code execution.
88
Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited
Weekly roundup: NetScaler, Apple, Cisco SD-WAN, and FortiMail zero-days exploited; Microsoft analytics flaw disclosed.
76
Citrix NetScaler Appliances Reboot Repeatedly After 0-Day Security Update
Patched Citrix NetScaler appliances crash and reboot when malformed SAML requests hit the nsaaad service.
76
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
CISA added exploited FortiMail flaw CVE-2026-104286, a critical unauthenticated file-write bug, to the KEV catalog.
86
Suspected State Hackers Exploited Citrix NetScaler for Weeks. 50,000 Devices May Still Be Exposed.
Suspected state hackers exploited two Citrix NetScaler zero-days; about 50,000 devices may remain exposed.
92
Google Warns of Hackers Actively Exploiting Citrix 0-Day Vulnerabilities to Deploy Web Shells
Attackers are exploiting two critical Citrix NetScaler zero-days to deploy WHIPSHOT web shells and tunnel inward.
91
Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)
Suspected state-sponsored actors exploited NetScaler zero-day CVE-2026-88772 since early September, affecting dozens of organizations.
91
Related CVEs
by mentions- CVE-2026-8877182%9.5Unauthenticated RCE in Citrix NetScaler ADC and Gateway
- CVE-2026-8877278%9.5Unauthenticated RCE/DoS in Citrix NetScaler ADC and Gateway
- CVE-2026-8877911%8.7Unauthenticated denial of service in NetScaler ADC and Gateway
- CVE-2026-1949033%9.3Remote Authentication Bypass in Citrix NetScaler ADC and NetScaler Gateway
- Predictable-value flaw in Citrix NetScaler ADC and Gateway
- CVE-2026-887733%9.3HTTP request smuggling in Citrix NetScaler ADC and Gateway
- CVE-2026-88776<1%8.8Memory overflow in Citrix NetScaler ADC and Gateway
- CVE-2026-88775<1%8.8Memory Overflow in Citrix NetScaler ADC and Gateway
- Memory overflow in Citrix NetScaler ADC and Gateway
- Feature Policy Bypass in Citrix NetScaler ADC and Gateway
Appears with
- Citrixvendor · 84
- NetScaler ADCproduct · 82
- CISAorganization · 48
- watchTowrorganization · 18
- Citrixorganization · 15
- Mandiantorganization · 9
- Fortinetvendor · 8
- Canadian Centre for Cyber Securityorganization · 7
- Ciscovendor · 7
- Secure Private Accessproduct · 6
- Bishop Foxorganization · 5
- SLAPSHOTmalware · 5
- JPMorgan Chaseorganization · 5
- CERT-EUorganization · 5
- GreyNoiseorganization · 5
- Googlevendor · 5
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.