Citrix XenServer Vulnerability Could Allow Host Compromise
CVE-2026-98432 in XenServer 8.4 and 9 requires management network access for unauthenticated host takeover.
1
Stories per day · 30 days
16 RSS
Relatednetscaler6xenserver5web-shell4hypervisor3kev3rce3cve2freebsd2patch2virtualization2zero-day2advisory1ai-agents1ai-governance1ccc1cloudflare1cve-2026-887711edge-security1
111 stories, newest first · one card per story
Stories tagged #citrix
Citrix XenServer Flaw Allows Unauthenticated Host Compromise
Updates fix nine CVEs including unauthenticated remote takeover in XenServer 8.4 and 9; Citrix rates as Critical.
Citrix expands oversight of autonomous browsing and AI agent activity
Citrix adds AI governance to SecurSpaces and SecurAccess for autonomous agents from providers like OpenAI and Anthropic.
Actors exploited NetScaler zero-days before Citrix's weekend patches
Citrix fixed unauthenticated RCE flaws CVE-2026-88771 through CVE-2026-88778 after admins were urged to disconnect edge systems.
Attackers exploit Citrix NetScaler RCE CVE-2026-88771
Unauthenticated attackers poison logs, plant web shells and try to run a FreeBSD implant; CISA listed the flaw.
NetScaler intrusions chain CVE-2026-88771 and CVE-2026-88779
On an affected 14.1 appliance, attackers gained root, planted PHP web shells, and took configuration and key material.
Exploited NetScaler flaws allow command execution before login
CVE-2026-88771 works without authentication, including on default configurations; CVE-2026-88772 involves DTLS.
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
Attackers are actively exploiting critical unauthenticated NetScaler RCE CVE-2026-88771, now listed in CISA's KEV catalog.
Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems
Citrix disclosed four XenServer flaws that may let privileged guest users compromise or crash the host.
Citrix Patches XenServer Vulnerabilities That Could Enable Host Compromise
Citrix patched four XenServer flaws, three of which could let a privileged guest compromise or crash the host.
Citrix security advisory (AV26-1034)
Canada's Cyber Centre urges updates for Citrix UniconOS and XenServer flaws listed in AV26-1034.
12th October – Threat Intelligence Report
Check Point's weekly report covers a Denmark registry breach of 8.8 million people, ransomware, and exploited enterprise flaws.
14
Citrix issues its weekly critical security patch for NetScaler ADC and NetScaler Gateway
Citrix patched critical NetScaler flaw CVE-2026-107406, a CVSS 9.5 memory overflow that can enable denial of service or code execution.
Citrix security advisory (AV26-1023)
Canada's Cyber Centre urges patches for Citrix NetScaler ADC and Gateway flaw CVE-2026-107406.
Citrix gives NetScaler admins another critical reason to patch
Citrix warns NetScaler ADC and Gateway CVE-2026-107406 can enable remote code execution, scoring CVSS 9.5.
CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability
Citrix patched critical NetScaler flaw CVE-2026-107406, which can allow remote code execution or denial of service.
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix urges immediate patches for critical NetScaler RCE CVE-2026-107406, with no known exploitation yet.
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
Citrix urges immediate patching of critical NetScaler ADC/Gateway memory-overflow flaw CVE-2026-107406 (CVSS 9.5) enabling RCE; no known exploits yet.
Critical Citrix NetScaler Vulnerability Allows Remote Code Execution Attacks – CVSS 9.5
Citrix disclosed CVE-2026-107406, a CVSS 9.5 NetScaler memory overflow that can allow remote code execution.
Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability
Citrix urges NetScaler ADC and Gateway customers to patch CVE-2026-107406, a critical SAML memory overflow enabling remote code execution.
Hackers Exploit Critical Citrix NetScaler Flaw to Deploy Web Shells and Steal Configuration Data
Attackers are exploiting critical NetScaler flaw CVE-2026-88771 to plant web shells and steal appliance configurations.
Critical Citrix NetScaler CVE-2026-88771 Exploited for Reverse Shells and Persistent Access
Attackers are exploiting critical Citrix NetScaler CVE-2026-88771 for reverse shells and persistent privileged access.
Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week
GBHackers' weekly digest highlights NetScaler zero-days, a 3-million-person Pentagon breach, and multiple AI security incidents.
6
Citrix discloses third actively exploited NetScaler zero-day in less than a week
Citrix patched CVE-2026-88779, a third exploited NetScaler zero-day causing denial of service on SAML appliances.