The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.

После получения root-доступа злоумышленники применяют SLAPSHOT для туннелирования, а WHIPSHOT используют как защищённый ...

Google warned that two critical Citrix NetScaler zero-days are being exploited for root access, web-shell deployment, and network intrusion.

Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into ...

Citrix has confirmed Netscaler ADC and Gateway devices are under active attack and issued urgent updates for the vulnerabilities. CVE-2026-88771 and CVE-2026-88772 are both rated 9.5 and allow remote ...

CISA says attackers are actively exploiting two Citrix NetScaler flaws globally; Citrix has released fixed versions.

Citrix has issued emergency security updates for NetScaler ADC and NetScaler Gateway after confirming active exploitation of two critical zero-day remote code execution vulnerabilities. The flaws, ...

GreyNoise observes adversary activity through our Global Observation Grid (GOG), a network of sensors that draws attacker scanning and exploitation onto infrastructure we control. This lets us study ...

Administrators of Citrix Netscaler instances should update their devices immediately. According to several sources, two new exploits (zero-days) are circulating, allowing code injection on vulnerable ...

Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code. Citrix confirmed that two critical zero-day ...

Citrix on Sunday released patches for two critical NetScaler ADC and NetScaler Gateway vulnerabilities that attackers exploited as zero-days, one of which allows unauthenticated command execution on ...

Citrix has confirmed ongoing exploitation of a pair of NetScaler zero days. Its advisory comes after days of furious speculation in the cybersecurity community about an ongoing campaign against ...