Thehackernews iconThehackernewsSep 27, 2026

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been exploited in the wild, Citrix confirmed on September 27. One of the two affects every deployment on an affected version, including those in the default configuration.

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Share this story

Send the public story page.

Useful takeaways from this story.

Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been exploited in the wild, Citrix confirmed on September 27.

One of the two affects every deployment on an affected version, including those in the default configuration.

It released fixes for both, along with six other flaws.

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been exploited in the wild, Citrix confirmed on September 27. One of the two affects every deployment on an affected version, including those in the default configuration. It released fixes for both, along with six other flaws.

Details worth keeping

It released fixes for both, along with six other flaws.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app