> TritonInfoSec News
Home / Sep 29, 2026 / Story
0
#1 The Hacker News general September 28, 2026 at 07:21 UTC

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

By [email protected] (The Hacker News)

AI Summary

CISA added two critical Citrix NetScaler ADC and Gateway vulnerabilities — CVE-2026-88771 (CVSS 9.5, improper input validation allowing unauthenticated remote exploitation) and CVE-2026-88772 — to its Known Exploited Vulnerabilities catalog following confirmed active exploitation globally. Security admins were already pulling NetScaler systems offline over the weekend before official advisories from CISA, the UK, and the Netherlands confirmed the threat. Federal agencies face a Wednesday patching deadline under BOD 22-01.

Read full article → https://thehackernews.com/2026/09/cisa-says-attack…

Relevance score: 92.0/100

# More from September 29

  1. 2
    Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug SecurityWeek
  2. 3
    Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation Krebs on Security
  3. 4
    ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns The Record
  4. 5
    Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M The Hacker News
  5. 6
    JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources The Hacker News
  6. 7
    Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon SecurityWeek
  7. 8
    New Attack Against RSA Schneier on Security
  8. 9
    Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent The Hacker News
  9. 10
    Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks The Hacker News