Citrix Bleed 2 (CVE-2025-5777, CVSS 9.2) is actively exploited to hijack sessions and bypass MFA on NetScaler ADC/Gateway. Patch immediately to prevent covert access and data theft.

A critical flaw (CVE-2025-6543, CVSS 9.2) in NetScaler ADC/Gateway is actively exploited for DoS. Over 2,100 unpatched appliances remain susceptible. Update immediately!

Citrix Bleed 2 (CVE-2025-5777, CVSS 9.3) is actively exploited to hijack sessions and bypass MFA on NetScaler ADC/Gateway. Patch immediately to prevent covert access and data theft.

CISA adds critical CitrixBleed 2 (CVE-2025-5777, CVSS 9.2) to KEV, confirming active exploitation. Attackers are extracting session tokens to bypass MFA and hijack sessions on NetScaler ADC/Gateway

The Cloud Software Group has released urgent updates for NetScaler ADC and Gateway to patch a zero-day (CVE-2025-7775) being actively exploited in the wild.

Citrix’s Latest Critical Flaws Are Being Exploited — Right Now

The architectural frailty within Citrix networking apparatuses, which until recently was characterized merely as a latent peril, is

1,361 vulnerabilities found this week: 129 are critical. Prioritize Chrome’s Dawn exploit, FortiClient EMS, and new AI pipeline attacks. Get the full list.

TL;DR Cloud Software Group patched six NetScaler vulnerabilities in NetScaler ADC and NetScaler Gateway. Three rate CVSS 8.8, and one allows an unauthenticated file read. Each flaw needs a specifi…

TL;DR Attackers are exploiting a Citrix NetScaler vulnerability in the wild, tracked as CVE-2026-8451 (CVSS 8.8). The pre-auth memory overread affects appliances configured as a SAML identity prov…

Researchers at watchTowr published a working exploit for a Citrix NetScaler RCE flaw this week. The bug, CVE-2026-8452, lets an unauthenticated attacker run code as root on the appliance. watchTow…

TL;DR Citrix patched a critical NetScaler authentication bypass tracked as CVE-2026-19490. It scores 9.3 on CVSS v4. A second flaw, CVE-2026-19489, can cause denial of service. Why it matters NetS…

TL;DR Two Citrix NetScaler zero-day flaws allowing remote code execution have been exploited in the wild. The alert began with a leaked NCSC-NL pre-notification and was echoed by watchTowr and Kev…

Attackers Need No Password The latest attacks on Citrix NetScaler require no password at all. Citrix has disclosed two critical zero-day flaws in NetScaler ADC and NetScaler Gateway. Attackers can…

TL;DR Citrix admins report NetScaler appliances rebooting repeatedly even after updating to build 14.1-73.37. Citrix now says it is tracking a new issue tied to NetScaler SAML authentication. A fi…

TL;DR Citrix has assigned Citrix NetScaler CVE-2026-88779 to the SAML issue behind recent appliance reboots. The company confirms attackers are exploiting the memory overflow flaw in the wild. Fix…

A seemingly innocuous cascading style sheet (CSS) address upon a standard Citrix login page has metamorphosed into an elaborate camouflage for covert, persistent remote access. The elite LevelBlue…

TL;DR Citrix has published a critical bulletin for CVE-2026-107406, a memory overflow flaw in NetScaler ADC and NetScaler Gateway rated 9.5 on CVSS v4.0. This Citrix NetScaler vulnerability &#8220…

The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.

NetScaler administrators face an increasingly frustrating reality, compelled to deploy device updates mere days after concluding a previous wave of frantic patching. Citrix recently issued an urge…