Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
- Posted on September 27, 2026
- By The Hacker News
- 1 Views
- 1 min read
In brief
Security researchers at watchTowr have discovered critical remote code execution vulnerabilities in Citrix NetScaler that are actively being exploited in the wild. The two zero-day flaws remain unpatched as Citrix has not yet released security advisories or firmware updates. This represents a significant risk to organizations relying on NetScaler appliances for network access and load balancing, with attackers actively leveraging these vulnerabilities before official remediation is available.
Summary auto-generated by AI from the original publisher's content. Editorial standards.
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
watchTowr says two unpatched NetScaler RCE flaws were exploited before fixes, while Citrix has yet to publish a bulletin or patch.
