Piece of news of the day

ADVANCED SECURITY EUROPA

EOOD

Citrix Urges Immediate Patching for Eight New Vulnerabilities, Including Critical Zero-Days Exploited in the Wild

28 September 2026

Citrix recently released updates for eight vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway, with two critical zero-day CVEs that were actively being exploited.
The most urgent flaws include a remote code execution (RCE) vulnerability and a memory overflow vulnerability affecting all deployments with default configurations or DTLS enabled.
Exploitation of these vulnerabilities has been observed, prompting Citrix to urge affected customers to install updates immediately.
One noteworthy flaw is a critical HTTP request smuggling vulnerability present when HTTP configuration is enabled, with reports of exploitation before the bulletin was released.
Various cybersecurity agencies, including the Australian Cyber Security Centre and the US CISA, have issued alerts ordering organizations to patch.
The remaining vulnerabilities range from feature policy bypass to memory overflow issues.
Citrix emphasizes that the bulletin only applies to customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, with cloud services being managed by Citrix itself.
Overall, organizations are urged to update their systems promptly to protect against potential attacks.