<![CDATA[Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation]]>

<![CDATA[Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation]]>watchTowr reported on September 26 that two unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances are being actively exploited in the wild. Both flaws allow remote code execution.

Citrix has not yet confirmed the vulnerabilities or released a patch. In response, some administrators have chosen to take their appliances offline rather than wait for a fix to become available.

Affected products:

Citrix NetScaler ADC
Citrix NetScaler Gateway

Given the lack of an official patch, organizations running these appliances should assess their exposure and consider interim risk mitigations until Citrix responds.

Source: The Hacker News

Has your organization taken any NetScaler appliances offline or applied temporary mitigations in response to this threat?

]]>https://xploitlk.com/topic/482/warning-two-unpatched-citrix-netscaler-rce-zero-days-under-active-exploitationRSS for NodeTue, 27 Oct 2026 10:36:06 GMTSun, 27 Sep 2026 08:30:19 GMT60