Security updates released on Tuesday resolve 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including multiple critical-severity bugs. Citrix published three advisories detailing nine security defects impacting Workspace App for Windows, XenServer 8.4 and XenServer 9, and UniconOS. Successful exploitation… Read More "Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products"
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
Citrix on Thursday warned users of a critical-severity NetScaler vulnerability that requires immediate patching. Tracked as CVE-2026-107406 (CVSS score of 9.5), the flaw is described as a memory overflow that could lead to remote code execution (RCE) or denial-of-service (DoS).… Read More "Citrix Urges Immediate Patching of Critical NetScaler Vulnerability"
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier
Citrix NetScaler administrators scrambled over the weekend to protect their appliances after exploitation of a new zero-day vulnerability began. Administrators initially reported reboots of fully patched NetScaler systems on Friday, and Citrix soon confirmed the existence of another zero-day exploited… Read More "Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier"
Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks
Google’s Mandiant and Threat Intelligence Group (GTIG) have published details on attacks exploiting the NetScaler zero-days that Citrix patched over the weekend. The vulnerabilities are tracked as CVE-2026-88771 and CVE-2026-88772, and they affect NetScaler ADC and NetScaler Gateway instances. Attackers… Read More "Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks"