Back to advisories

Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

Two critical zero-day vulnerabilities in Citrix NetScaler are actively being exploited in the wild, giving attackers broad network access on affected systems. Default configurations are particularly vulnerable. This impacts any organization using NetScaler for network access and security.

CRITICALAdvisorySep 30, 2026
Action required
Identify all NetScaler appliances in your environment immediately. Check Citrix advisories for indicators of compromise and exploitation signatures. If you cannot patch today, isolate or restrict network access to affected NetScaler instances until patches are available.
Affected products
NetScalerCitrix