CVE-2026-88778 - TCP Initial Sequence Number (ISN) prediction CVE ID : CVE-2026-88778 Published : Sept. 27, 2026, 5:16 p.m. | 58 minutes ago Description : Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. Th...

CVE-2026-88778 is trending. Hype score 21, currently #5 on cvemon. Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before… https://cvemon.intruder.io/cves/CVE-2026-88778

CVE-2026-88777 - Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service CVE ID : CVE-2026-88777 Published : Sept. 27, 2026, 5:16 p.m. | 58 minutes ago Description : Memory overflow vulnerability vulnerability in Citrix NetScaler...

CVE-2026-88776 - Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service CVE ID : CVE-2026-88776 Published : Sept. 27, 2026, 5:16 p.m. | 58 minutes ago Description : Memory overflow vulnerability vulnerability in Citrix NetScaler...

CVE-2026-88776, CVE-2026-88777 and CVE-2026-88778 affect Citrix NetScaler ADC and Gateway: two memory overflow flaws that can cause denial of service and a TCP sequence-number prediction issue. Citrix has released fixes in 14.1-73.37 and 13.1-64.23.

CVE-2026-88775 - Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service CVE ID : CVE-2026-88775 Published : Sept. 27, 2026, 5:16 p.m. | 58 minutes ago Description : Memory overflow vulnerability in Citrix NetScaler ADC and Citri...

CVE-2026-88773 - HTTP Request Smuggling CVE ID : CVE-2026-88773 Published : Sept. 27, 2026, 5:16 p.m. | 58 minutes ago Description : Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScale...

CVE-2026-88773 - gateway Older versions of Citrix NetScaler ADC and NetScaler Gateway may treat incoming web requests differently, allowing a single request to be split and processed incorrectly.… Too many irrelevant or confusing CVEs? Use stackflag.com #gateway #citrixnetscaler #CVE #infosec

CVE-2026-88773: Citrix NetScaler ADC and Gateway can mishandle web traffic

Older versions of Citrix NetScaler ADC and NetScaler Gateway may treat incoming web requests differently, allowing a single request to be split and.

stackflag.com

🚨 CVE-2026-88773 — CVSS 9.3 CRITICAL Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix Ne... 🔎 https://stemshop.top/cve/CVE-2026-88773 #CVE #CyberSecurity #InfoSec

CVE-2026-88772 is trending. Hype score 26, currently #2 on cvemon. Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS… https://cvemon.intruder.io/cves/CVE-2026-88772

CVE-2026-88772 - adc Versions of Citrix NetScaler ADC and NetScaler Gateway released before the latest updates can be tricked into running unwanted code or stopping service. This could let an attacker… Too many irrelevant or confusing CVEs? Use stackflag.com #adc #citrixnetscaler #CVE #infosec

CVE-2026-88772: Citrix NetScaler ADC/Gateway may allow takeover or crash

Versions of Citrix NetScaler ADC and NetScaler Gateway released before the latest updates can be tricked into running unwanted code or stopping service.

stackflag.com

🚨 CVE-2026-88772 — CVSS 9.5 CRITICAL Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.... 🔎 https://stemshop.top/cve/CVE-2026-88772 #CVE #CyberSecurity #InfoSec

CVE-2026-88771 is trending. Hype score 33, currently #1 on cvemon. Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS,… https://cvemon.intruder.io/cves/CVE-2026-88771

CVE-2026-88771 Older versions of Citrix NetScaler ADC and NetScaler Gateway do not properly check certain inputs, which could let an unauthenticated attacker run commands on the device. This could give the attacker control… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-88771: Citrix NetScaler ADC/Gateway allows remote command execution

Older versions of Citrix NetScaler ADC and NetScaler Gateway do not properly check certain inputs, which could let an unauthenticated attacker run.

stackflag.com

🚨 CVE-2026-88771 — CVSS 9.5 CRITICAL Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue af... 🔎 https://stemshop.top/cve/CVE-2026-88771 #CVE #CyberSecurity #InfoSec

🤖 Citrix NetScaler: 2 RCE zero-days exploited pre-patch, CVSS 9.5 each. CVE-2026-88771 hits every deployment (unauth cmd exec); CVE-2026-88772 via DTLS, default on VPN vservers. Fixed: 14.1-73.37 / 13.1-64.23. https://thehackernews.com/2026/09/warning-two-unpatched-citrix-netscaler.html

Citrix lanceert noodupdates na actieve uitbuiting van kritieke kwetsbaarheden in Citrix heeft beveiligingsupdates uitgebracht voor NetScaler ADC en NetScaler Gateway vanwege twee kritieke kwetsbaarheden, CVE-2026-88771 en CVE-2026-88772, die momenteel actief worden uitgebuit. Beide kwetsbaa...

Citrix lanceert noodupdates na actieve uitbuiting van kritieke kwetsbaarheden in NetScaler

Citrix heeft beveiligingsupdates uitgebracht voor NetScaler ADC en NetScaler Gateway vanwege twee kritieke kwetsbaarheden, CVE-2026-88771 en CVE-2026-88772, die momenteel actief worden uitgebuit. Beide kwetsbaarheden hebben een CVSS v4.0 score van 9.5 en stellen externe, niet-geauthenticeerde aanvallers in staat om willekeurige code uit te voeren. CVE-2026-88771, veroorzaakt door onjuiste invoervalidatie, maakt willekeurige command-uitvoering mogelijk en treft alle implementaties, inclusief standaardconfiguraties. CVE-2026-88772, een geheugen-overflowkwetsbaarheid, kan, indien DTLS is ingeschakeld – wat standaard is op VPN virtuele servers – leiden tot Remote Code Execution (RCE) of een den...

newsfacts.info

🚨 CVE-2026-88771 & CVE-2026-88772: Citrix has patched two exploited NetScaler zero-days (CVSS 9.5). Update to 14.1-73.37 / 13.1-64.23 and check for compromise. www.cyberkendra.com/2026/09/cve-... #citrixvulnerability #netscaler #zeroday #infosec

Citrix released patched today for 8 NetScaler vulnerabilities, CVE-2026-88771 through CVE-2026-88778. Although I don't know all the details, word is that one or more of these vulnerabilities are being actively exploited. Patch as soon as possible.

Two Citrix NetScaler zero-day RCE flaws are under active exploitation. Citrix confirmed CVE-2026-88771 and CVE-2026-88772 and shipped patches. Update now. #Citrix #NetScaler #ZeroDay #RCE #PotatoSecurity #VPN #watchTowr #PatchNow

Two Citrix NetScaler zero-day RCE flaws are under active exploitation. Citrix confirmed CVE-2026-88771 and CVE-2026-88772 and shipped patches. Update now. #Citrix #NetScaler #ZeroDay #RCE #CyberSecurity #VPN #watchTowr #PatchNow

Citrix NetScaler Zero-Day RCE Flaws Exploited, Patches Released

TL;DR Two Citrix NetScaler zero-day flaws allowing remote code execution have been exploited in the wild. The alert began with a leaked NCSC-NL pre-notification and was echoed by watchTowr and Kevin Beaumont. Citrix has now released a security bulletin covering eight CVEs, and it confirms exploitation of CVE-2026-88771 and CVE-2026-88772. Patch now. Why This NetScaler Zero-Day Matters NetScaler ADC and Gateway sit at the network edge.

securityonline.info

NetScalerの重大な脆弱性により、特定のゲートウェイサーバーおよびAAAサーバーで認証を回避できる可能性がある Citrixは、NetScaler ADCおよびNetScaler Gatewayの導入に影響を与える2つのセキュリティ上の欠陥に対処するためのアップデートをリリースしました。これには、深刻な認証バイパスの脆弱性が含まれています。 クラウドコンピューティングおよび仮想化技術企業によると、これらの問題は、特定のFIPSおよびNDcPPビルドを含む、顧客が管理するNetScaler ADCおよびNetScaler Gateway、ならびに顧客が管理するNetScalerイ...

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

Citrix fixes NetScaler CVE-2026-19490, a CVSS 9.3 authentication bypass affecting certain Gateway, AAA, and SAML configurations.

thehackernews.com

Citrixは、NetScalerの新たな脆弱性をできるだけ早く修正するよう管理者に強く求めている。 Citrixは、NetScaler GatewayセキュアリモートアクセスソリューションとNetScaler ADCネットワークアプライアンスに影響を与える2つの脆弱性からシステムを保護するため、顧客に対し直ちにセキュリティ対策を講じるよう警告した。 2つのうちより深刻な脆弱性（CVE-2026-19490として追跡）では、NetScalerのファームウェアバージョンとSAMLアクションが構成されているかどうかに応じて、アプライアンスがAAA仮想サーバーまたはゲートウェイ（SSL V...

Citrix urges admins to patch new NetScaler flaws as soon as possible

Citrix has warned customers to immediately secure their systems against two vulnerabilities affecting NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances.

bleepingcomputer.com

Citrix NetScalerの重要な認証バイパスに対する悪用が予想されるが、パッチが適用された。 CVE-2026-19490（CVSSスコア9.3）として追跡されているこの重大なバグは、代替パスを使用した認証バイパスとして説明されており、ゲートウェイ（SSL VPN、ICAプロキシ、CVPN、RDPプロキシ）またはAAA仮想サーバーとして構成されたNetScalerアプライアンスに影響を与えます。 サイバーセキュリティ企業のRapid7によると、この脆弱性は、ユーザーの操作なしに、遠隔地の認証されていない攻撃者によって悪用される可能性があるという。 Citrixの勧告によると...

Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler

Citrix has patched CVE-2026-19490, a critical-severity vulnerability in NetScaler leading to authentication bypass.

securityweek.com

Citrix NetScalerの重大な脆弱性により、攻撃者が認証を回避できることが判明 Cloud Software Groupは、顧客が管理するNetScaler ADCおよびNetScaler Gatewayアプライアンスに影響を与える2つの脆弱性に関する重要なセキュリティ速報を発行しました。 これらの脆弱性の中には、認証を回避できる欠陥があり、リモートアクセス環境が認証されていない侵入に対して脆弱になる可能性がある。 Citrix NetScalerの脆弱性 最も深刻な問題は、CVE-2026-19490として追跡されており、CVSS v4の基本スコアは9.3で、CWE-2...

Critical Citrix NetScaler Flaw Allows Attackers to Bypass Authentication

Cloud Software Group has issued a critical security bulletin regarding two vulnerabilities that affect customer-managed NetScaler ADC and NetScaler Gateway appliances.

gbhackers.com

「NetScaler ADC/Gateway」に認証回避の脆弱性 - 重要度「クリティカル」 「NetScaler ADC（旧Citrix ADC）」「NetScaler Gateway（旧Citrix Gateway）」に深刻な脆弱性が明らかとなった。重要度は「クリティカル」とされており、利用者にアップデートを呼びかけている。 Cloud Software Groupは現地時間8月19日、セキュリティアドバイザリを公開し、「CVE-2026-19490」「CVE-2026-19489」について明らかにしたもの。アドバイザリの重要度を4段階中もっとも高い「クリティカル（Critica...

CVE-2026-62062 - WordPress Elementor Website Builder plugin CVE ID : CVE-2026-62062 Published : Sept. 25, 2026, 6:29 a.m. | 29 minutes ago Description : Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This ...

🟠 CVE-2026-62062 - High (8.8) Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows Cross Site Re... https://www.thehackerwire.com/vulnerability/CVE-2026-62062/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack

🌊 ABYSSAL · critical with a public exploit CVE-2026-89055: The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including… CVSS 9.1 · EPSS 0.4% https://beta.vulnsea.com/cve/CVE-2026-89055 #CVE #infosec #cybersecurity #threatintel

Customer Reviews for WooCommerce <=5.120.0 faces CRITICAL (CVSS 9.1) vuln: attackers can delete site media via public review-form links. Restrict access & monitor activity now. https://radar.offseq.com/threat/cve-2026-89055-cwe-862-missing-authorization-in-ivole-customer-reviews-for-woocommerce-4...

CVE-2026-89055: CWE-862 Missing Authorization in ivole Customer Reviews for WooC

CVE-2026-89055 is an authorization bypass vulnerability (CWE-862) in the Customer Reviews for WooCommerce plugin for WordPress. The plugin fails to properly verify user authorization before allowing actions on attachments. Attackers with ac

radar.offseq.com