> TritonInfoSec News
Home / Sep 28, 2026 / Story
0
#2 The Hacker News general September 27, 2026 at 07:47 UTC

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

By [email protected] (The Hacker News)

AI Summary

watchTowr confirmed on September 26 that two unpatched Citrix NetScaler ADC and NetScaler Gateway zero-days enabling remote code execution are being actively exploited in the wild, with no CVE assignment or vendor patch available. Citrix has not publicly acknowledged the vulnerabilities, leaving administrators with no official mitigation path beyond taking devices offline. The dual-vulnerability, no-patch scenario on a widely deployed network gateway product represents a severe exposure window for enterprise and government networks.

Read full article → https://thehackernews.com/2026/09/warning-two-unpa…

Relevance score: 87.0/100

# More from September 28

  1. 1
    Citrix admins warned to shut down NetScalers over 2 exploited zero-days BleepingComputer
  2. 3
    Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks SecurityWeek
  3. 4
    GitHub Actions re-enabled with Mini Shai-Hulud payload still active BleepingComputer
  4. 5
    Cloudflare fixes Containers cross-tenant flaw exposing customer data BleepingComputer
  5. 6
    New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining SecurityWeek
  6. 7
    OpenAI's AI agents accidentally uploaded user-provided images to third-party sites BleepingComputer
  7. 8
    OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure SecurityWeek
  8. 9
    Zero Trust for AI Agents Starts With Fixing Zero Visibility The Hacker News
  9. 10
    Microsoft pauses KB5002907 update after Office license deactivations BleepingComputer