cybersecuritynews

Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems

Citrix has disclosed four XenServer vulnerabilities, including three that could let a malicious user with elevated rights inside a virtual machine compromise or crash the underlying host. Citrix ...
CyberScoop

Citrix discloses third actively exploited NetScaler zero-day in less than a week

Citrix customers just got through back-to-back weekends filled with varying levels of uncertainty and worry, as yet another actively exploited zero-day vulnerability was discovered in Citrix NetScaler ...
cyberpress

Multiple Citrix UniconOS and XenServer Flaws Let Attackers Escalate Privileges and Compromise Hosts

Citrix disclosed seven vulnerabilities in UniconOS and XenServer that could enable local privilege escalation, persistent command execution, arbitrary file access, and compromise of virtualization ...
SecurityWeek

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

Citrix NetScaler administrators scrambled over the weekend to protect their appliances after exploitation of a new zero-day vulnerability began. Administrators initially reported reboots of fully ...
cybersecuritynews

Citrix NetScaler Keeps Rebooting Following the 0-Day Patch

Citrix NetScaler customers are reporting repeated appliance reboots after installing build 14.1-73.37, the emergency update released for two zero-day flaws under active attack. The failures appear ...
theregister

Citrix gives NetScaler admins another critical reason to patch

Citrix is urging customers to patch another critical NetScaler vulnerability after weeks of disclosures involving actively exploited flaws. CVE-2026-107406 affects NetScaler ADC and NetScaler Gateway ...
shattered.io

Citrix NetScaler’s 2 Zero-Days Ship With No CVE [2026]

Citrix NetScaler is in trouble again. On September 26, 2026, security research firm watchTowr said it had found two new unpatched remote code execution flaws in NetScaler ADC and NetScaler Gateway ...
cisa

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

CISA added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog on Sept. 27, 2026. Both are critical, zero-day vulnerabilities that can independently enable remote ...
theregister

Citrix NetScaler security snafus get even worse amid more 0-day reports

The attackers just keep coming after Citrix NetScaler appliances, as both the feds and private security researchers warn that someone found - and has already exploited - yet another Citrix bug before ...
CRN

CRN News Coverage Of Citrix

As part of CRN’s 2026 Storage 100, here are 40 data recovery/observability/resilience technology vendors taking their offerings to new heights. F5 President and CEO ...
Dark Reading

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

On Sept. 24, threat detection firm GreyNoise Intelligence observed a single US-based IP address scanning for Citrix NetScaler installations and conducting remote code execution (RCE) attacks. The ...
CSOonline

Citrix warns of actively exploited NetScaler flaw days after zero-day patch rush

A newly disclosed memory overflow flaw is being targeted in attacks, and NetScaler deployments require another round of patching for some customers. Citrix has warned customers about another ...