#NetScaler
All CosmicBytez Labs articles tagged #NetScaler, across news, security advisories, how-to guides, and projects.
- News
What the NetScaler Zero-Days Tell Us About the New Normal for Edge Patching
Citrix patched unauthenticated RCE flaws exploited since mid-September. A SecurityWeek column argues emergency, after-hours patching is now routine.
- News
Citrix Warns of New Critical NetScaler RCE Flaw in SAML Deployments
A new critical NetScaler ADC and Gateway memory-overflow flaw in SAML configurations enables RCE; Citrix urges admins to patch immediately.
- Newsletter
Oct 6 Digest: Citrix's Third NetScaler Zero-Day, FortiBleed Still Active, AI Hits Korean Banks
This week: Citrix's third NetScaler zero-day in seven days, FortiBleed lockouts warn of ransomware, AI agents suspected in Korean bank hacks.
- News
Citrix NetScaler CVE-2026-88771 Exploitation Spawns Superuser Backdoor, CSS-Disguised Web Shell
LevelBlue found CVE-2026-88771 exploitation on Citrix NetScaler creating a sec_monitor superuser account and a PHP web shell mapped to CSS-like URLs.
- News
Citrix Patches NetScaler SAML Zero-Day Exploited in Attacks
Citrix rushed emergency patches for CVE-2026-88779, a NetScaler SAML zero-day exploited in DoS attacks as researchers probe RCE potential.
- News
Kiteworks & Citrix Incidents Expose the Hard Tradeoffs of Zero-Day Disclosure
A DarkReading analysis contrasts Kiteworks' proactive shutdown advisory with Citrix's quiet pre-patch silence during active NetScaler exploitation.
- News
Mandiant: Suspected State Hackers Exploited NetScaler Zero-Day for Three-Plus Weeks Undetected
Mandiant traced NetScaler zero-day exploitation to Sept. 3, weeks before detection, hitting dozens of orgs tied to suspected state actors.
- News
US, UK, and Dutch Agencies Warn of Actively Exploited Citrix NetScaler Zero-Days
US, UK, and Dutch agencies warn Citrix NetScaler ADC and Gateway zero-days CVE-2026-88771 and CVE-2026-88772 are under active global exploitation.
- Newsletter
Weekly Digest — Issue #37
Dual Citrix NetScaler zero-days spark global chaos, Apple patches a Meta-reported spyware bug, and an agentic AI attacker wipes an Azure tenant in 7 minutes.
- Security
CVE-2026-88773: Citrix NetScaler HTTP Request Smuggling Flaw
Citrix patches a CVSS 9.3 HTTP request smuggling flaw in NetScaler ADC/Gateway that can enable cache poisoning and auth bypass at the proxy layer.
- Security
CVE-2026-88775: Citrix NetScaler Memory Overflow Vulnerability
A critical memory overflow flaw in Citrix NetScaler ADC/Gateway (CVSS 9.8) risks crashes or worse on Gateway and AAA virtual servers — patch now.
- News
Citrix Confirms Two NetScaler RCE Zero-Days, Ships Patches as CVE-2026-88771 and CVE-2026-88772
Citrix confirmed and patched two exploited NetScaler RCE zero-days watchTowr warned about a day earlier — August's fixed builds remain vulnerable.
- News
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
watchTowr warns two unconfirmed Citrix NetScaler RCE zero-days are being exploited; Citrix has issued no CVE, patch, or advisory yet.
- News
CISA Orders Feds to Patch Actively Exploited Citrix Flaw by Thursday
CISA has issued a mandatory patching directive ordering all U.S. federal agencies to apply Citrix NetScaler security updates by Thursday, March 5, 2026,...
- News
Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks
Hackers are actively exploiting a critical memory overread vulnerability tracked as CVE-2026-3055 in Citrix NetScaler ADC and NetScaler Gateway appliances...
- News
Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active
Security researchers at Defused Cyber and watchTowr have detected active reconnaissance targeting CVE-2026-3055, a critical CVSS 9.3 memory overread flaw...
- News
Citrix Urges Admins to Patch NetScaler Flaws as Soon as
Citrix has patched two NetScaler ADC and Gateway vulnerabilities — including a critical CVSS 9.3 out-of-bounds read flaw eerily similar to the previously...