Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into ...

Citrix NetScaler customers are reporting repeated appliance reboots after installing build 14.1-73.37, the emergency update released for two zero-day flaws under active attack.

BeyondTrust zero-day CVE-2026-102764 was exploited by Chinese state hackers for seven weeks before disclosure, letting ...

Towr says two unpatched NetScaler RCE flaws were exploited before fixes, while Citrix has yet to publish a bulletin or patch.

Citrix patched eight NetScaler flaws, including two zero-days attackers already exploit. CISA says both exploited bugs can enable remote code execution without passwords or user interaction.

CISA says attackers are actively exploiting two Citrix NetScaler flaws globally; Citrix has released fixed versions.

Citrix disclosed four XenServer vulnerabilities, three of which could let privileged VM users compromise or crash the host.

Citrix disclosed seven vulnerabilities in UniconOS and XenServer that could enable local privilege escalation, persistent ...

Analysis of newly discovered CVE-2026-88771 zero-day exploit traces attacker infrastructure to a command-and-control ...

New vulnerabilities are being actively exploited. Updates are being rolled out and fix more than a half dozen vulnerabilites.

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler ...

Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code.