NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

Critical Citrix NetScaler auth bypass now leveraged in attacks

BACKGROUND
2 SIGNALSFIRST DETECTED 5 September 2026
Narrative synthesis pending — 2 signals collected.
How the story developed
Other feeds and industry voices
4 Oct
Citrix patches NetScaler SAML zero-day exploited in attacks

Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers

REPORT · WHAT · BleepingComputerOPEN STORY
27 Sept
Citrix admins warned to shut down NetScalers over 2 exploited zero-days

Two unpatched Citrix NetScaler zero-day vulnerabilities are reportedly being exploited in attacks, with cybersecurity agencies, security researchers, and IT providers privately

REPORT · WHAT · BleepingComputerOPEN STORY
14 May
Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed

REPORT · WHAT · BleepingComputerOPEN STORY
28 Sept
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway

The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.

REPORT · WHAT · NCSC UKOPEN STORY
20 Aug
Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass

REPORT · WHAT · The Hacker NewsOPEN STORY
27 Sept
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild,

REPORT · WHO · The Hacker NewsOPEN STORY
19 Oct
Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

CVE-2026-88771 lets attackers run commands on NetScaler Gateway before anyone signs in. Patching takes time most teams don't have, so the sign-in decision has to move in front of

REPORT · HOW · Cloudflare BlogOPEN STORY
24 Jun
Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access

New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on

REPORT · HOW · BleepingComputerOPEN STORY
Sources
BleepingComputer×2

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →