Metasploit adds unauthenticated RCE modules for perimeter devices
New modules cover Flowise, SPIP, OpenBullet2, GitLab, Portainer, and a NetScaler bug the vendor said was exploited.
5
Stories per day · 30 days
13 RSS
Relatedcitrix6kev5rce4web-shell4zero-day4exploitation2freebsd2cisa1cloudflare1cve-2026-887711edge-security1flowise1gitlab1ivanti1metasploit1network-infrastructure1openbullet21php2shell1
106 stories, newest first · one card per story
Stories tagged #netscaler
Eclypsium report details exploited flaws in firewalls, VPNs and network appliances
InfraTrust tracked 133 new advisories covering 2,813 vulnerabilities in a month; 16 advisories involved actively exploited KEV-listed flaws.
6
Actors exploited NetScaler zero-days before Citrix's weekend patches
Citrix fixed unauthenticated RCE flaws CVE-2026-88771 through CVE-2026-88778 after admins were urged to disconnect edge systems.
Attackers exploit Citrix NetScaler RCE CVE-2026-88771
Unauthenticated attackers poison logs, plant web shells and try to run a FreeBSD implant; CISA listed the flaw.
NetScaler intrusions chain CVE-2026-88771 and CVE-2026-88779
On an affected 14.1 appliance, attackers gained root, planted PHP web shells, and took configuration and key material.
Exploited NetScaler flaws allow command execution before login
CVE-2026-88771 works without authentication, including on default configurations; CVE-2026-88772 involves DTLS.
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
Attackers are actively exploiting critical unauthenticated NetScaler RCE CVE-2026-88771, now listed in CISA's KEV catalog.
September 2026 CVE Landscape
Recorded Future says 80 vulnerabilities were actively exploited in September 2026, including NetScaler zero-days.
10
Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs round 599 collects weekly headlines on breaches, arrests, ransomware, and exploited flaws.
9
Week in review: FortiBleed is still active, Patch Tuesday forecast
CISA added an exploited NetScaler flaw to KEV as Atlassian, Exchange, and SonicWall patches landed amid active attacks.
15
Citrix issues its weekly critical security patch for NetScaler ADC and NetScaler Gateway
Citrix patched critical NetScaler flaw CVE-2026-107406, a CVSS 9.5 memory overflow that can enable denial of service or code execution.
Citrix security advisory (AV26-1023)
Canada's Cyber Centre urges patches for Citrix NetScaler ADC and Gateway flaw CVE-2026-107406.
Citrix gives NetScaler admins another critical reason to patch
Citrix warns NetScaler ADC and Gateway CVE-2026-107406 can enable remote code execution, scoring CVSS 9.5.
CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability
Citrix patched critical NetScaler flaw CVE-2026-107406, which can allow remote code execution or denial of service.
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix urges immediate patches for critical NetScaler RCE CVE-2026-107406, with no known exploitation yet.
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
Citrix urges immediate patching of critical NetScaler ADC/Gateway memory-overflow flaw CVE-2026-107406 (CVSS 9.5) enabling RCE; no known exploits yet.
Critical Citrix NetScaler Vulnerability Allows Remote Code Execution Attacks – CVSS 9.5
Citrix disclosed CVE-2026-107406, a CVSS 9.5 NetScaler memory overflow that can allow remote code execution.
Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability
Citrix urges NetScaler ADC and Gateway customers to patch CVE-2026-107406, a critical SAML memory overflow enabling remote code execution.
Hackers Exploit Critical Citrix NetScaler Flaw to Deploy Web Shells and Steal Configuration Data
Attackers are exploiting critical NetScaler flaw CVE-2026-88771 to plant web shells and steal appliance configurations.
Critical Citrix NetScaler CVE-2026-88771 Exploited for Reverse Shells and Persistent Access
Attackers are exploiting critical Citrix NetScaler CVE-2026-88771 for reverse shells and persistent privileged access.
Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week
GBHackers' weekly digest highlights NetScaler zero-days, a 3-million-person Pentagon breach, and multiple AI security incidents.
6
Citrix discloses third actively exploited NetScaler zero-day in less than a week
Citrix patched CVE-2026-88779, a third exploited NetScaler zero-day causing denial of service on SAML appliances.
Citrix NetScaler security snafus get even worse amid more 0-day reports
Attackers are exploiting unpatched Citrix NetScaler CVE-2026-88779, a SAML memory overflow that causes denial of service.
US, Australia warn of latest Citrix vulnerability after NetScaler advisory
CISA orders agencies to patch actively exploited Citrix NetScaler flaw CVE-2026-88779, a confirmed denial-of-service bug.