#netscaler

More than 28,000 Citrix NetScaler instances are exposed to a zero-day remote code execution vulnerability actively exploited in the wild, affecting multiple countries including the U.S., Germany, and the U.K.

Source: BleepingComputer

Critical and high-severity vulnerabilities in Citrix NetScaler ADC and Gateway could allow attackers to read sensitive memory or cause session mix-ups, affecting on-prem deployments.

Source: NCSC | Citrix

Citrix released CVE‑2026‑3055 fixes for NetScaler ADC and Gateway appliances, preventing unauthenticated out-of-bounds memory reads when used as SAML Identity Providers.

Source: Arctic Wolf

Security experts are warning that a new NetScaler flaw—dubbed CitrixBleed 2—could already be in hackers’ hands. It lets attackers steal live session tokens and bypass login protections without ever needing a password.