THREATNOIR
Subscribe
Back to advisories

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two unpatched zero-day RCE vulnerabilities in Citrix NetScaler ADC and Gateway appliances are under active exploitation. No CVEs or patches are available yet. Any organization running these appliances is at immediate risk of compromise.

CRITICALAdvisorySep 28, 2026
Action required
Inventory all Citrix NetScaler ADC and Gateway appliances immediately. Monitor for suspicious HTTP requests, command execution, and outbound connections from these devices. Consider taking appliances offline if business continuity allows.
Affected products
NetScaler ADCNetScaler GatewayCitrix
Linked articles
Source links