2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
- Actief misbruik
- Niet bevestigd
- Hoogste CVSS
- —
- Kans op misbruik (EPSS)
- —
- Prioriteit
- 15 van 100
Uit de melding
On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of these 2 critical vulnerabilities in the wild.
CERT-EU recommends updating affected software and running a compromise assessment on those exposed on the internet.
Lees de volledige melding bij CERT-EU Security AdvisoriesBron: CERT-EU Security Advisories, CC BY 4.0, samengevat en vertaald door Seinwacht.