SEKurity GmbH Logo
Home/Tags/Citrix

#Citrix

2 Articles tagged

[*] Filtering articles by tag: Citrix
[+] Matching entries: 2
root@sekurity:~# ls -la /tags/citrix/* _

CVE Research
sekurity-team

InSEKurity of the Week (CW39/2026): Citrix NetScaler Zero-Day Exploitation (CVE-2026-88771)

Citrix patched eight NetScaler CVEs on a Sunday, two of them already exploited as zero-days. CVE-2026-88771 affects every ADC and Gateway on an affected build -- default configuration included -- and the August builds most teams installed do not contain the fix.

01
CVE Research
sekurity-team

InSEKurity of the Week (CW35/2026): Citrix NetScaler SAML Heap Overflow (CVE-2026-8452)

Citrix shipped the fix on June 30 and called it a denial of service. Seven weeks later watchTowr turned the same heap overflow into pre-auth root, and web shells landed on unpatched NetScaler appliances within days -- CISA added it to KEV on August 26 with a three-day deadline.

02

root@sekurity:~# echo "End of results for tag: Citrix"
End of results for tag: Citrix
root@sekurity:~# _