BleepingComputer · Lawrence Abrams ·

Citrix confirms two critical NetScaler zero-day RCE vulnerabilities are being exploited in attacks, says it has released security updates to fix the flaws

Update: Article rewritten with official confirmation from Citrix.

Amazon Cybersecurity

In this story Citrix NetScaler

Citrix confirms two critical NetScaler zero-day RCE vulnerabilities are being exploited in attacks, says it has released security updates to fix the flaws

Lead Source

BleepingComputer — Citrix confirms two critical NetScaler zero-day RCE vulnerabilities are being exploited in attacks, says it has released security updates to fix the flaws ↗

How this story grew

Coverage · 0 Discussion · 0

Sep 28Sep 29

More

watchTowr Labs: watchTowr Labs

CISA: CISA

Cybersecurity Dive: Cybersecurity Dive

The Record: The Record

National Cyber Security Centre: National Cyber Security Centre

CERT-EU: CERT-EU

TechRadar: TechRadar

Security Affairs: Security Affairs

Infosecurity: Infosecurity

Cyber Security News: Cyber Security News

Help Net Security: Help Net Security

Network World: Network World

Discussion

@fckelnmskthnzbllnr

r/netsec r/sysadmin

Benjamin Harris

@campuscodi@mastodon.social

@intcyberdigest

Related stories

The Verge: Microsoft rolls out emergency fix for critical issues caused by its September Patch Tuesday update, which addressed ~1,000 vulnerabilities but introduced bugs

BleepingComputer: Google patches an actively exploited zero-day flaw in Chrome that could potentially allow remote code execution within Chrome's sandboxed renderer process

Reuters: Google says ShinyHunters has renewed "mass exploitation" of a flaw in Oracle's PeopleSoft; ShinyHunters has said it accessed FBI data using a flaw in PeopleSoft

Ars Technica: Microsoft's September 2026 Patch Tuesday fixes a record ~972 vulnerabilities, taking its total flaws patched in 2026 so far to 2,760, more than double from 2025

Reuters: Gambit Security: Russian-speaking ransomware gang Aur0ra used SpaceX's Cursor AI coding assistant to breach at least seven companies between April 8 and May 21

Discuss with AI

ChatGPT ↗ Claude ↗

← Back to TechSnif