🟠High: New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
-
Citrix has released security updates to address a high-severity flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited in targeted zero-day attacks.
The vulnerability, tracked as CVE-2026-88779, carries a CVSS score of 8.7 out of 10.0. According to the available information, it is a memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway that can lead to disruption of SAML deployments.
- Affected products: NetScaler ADC and Citrix NetScaler Gateway
- Severity: CVSS 8.7 (high)
- Exploitation status: exploited in targeted zero-day attacks
- Potential impact: SAML deployments can be knocked offline
Citrix has issued security updates to fix the issue. Given active exploitation, administrators running affected NetScaler ADC or NetScaler Gateway instances should review the vendor guidance and apply the available updates as soon as possible.
Source: The Hacker News
Has your organization already patched its NetScaler deployments, or are you still assessing exposure?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login