#netscaler — Public Fediverse posts

#CISA impone un parche urgente por un fallo crítico en Citrix #NetScaler con explotación activa

https://unaaldia.hispasec.com/cisa-impone-un-parche-urgente-por-un-fallo-critico-en-citrix-netscaler-con-explotacion-activa/?utm_source=rss&amp

#CISA orders feds to patch #Citrix #NetScaler RCE flaw by Saturday

https://www.bleepingcomputer.com/news/security/cisa-hackers-now-exploiting-citrix-netscaler-rce-flaw-in-attacks/

#cybersecurity

#CISA suma seis fallos explotados al catálogo KEV y eleva la urgencia de parcheo en #NetScaler, #Linux y #SQL Server

https://unaaldia.hispasec.com/cisa-suma-seis-fallos-explotados-al-catalogo-kev-y-eleva-la-urgencia-de-parcheo-en-netscaler-linux-y-sql-server/?utm_source=rss&amp

CISA adds six exploited vulnerabilities to its KEV Catalog, including a Citrix NetScaler flaw and CVE-2026-8452, with active exploitation confirmed.

#CISA #KEV #Citrix #NetScaler #CyberSecurity #CVE

https://securityonline.info/cisa-kev-six-exploited-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE Alert: CVE-2026-8452 - NetScaler - ADC - https://www.redpacketsecurity.com/cve-alert-cve-2026-8452-netscaler-adc/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-8452 #netscaler #adc

#Citrix urges admins to patch new #NetScaler flaws as soon as possible

https://www.bleepingcomputer.com/news/security/citrix-urges-admins-to-patch-new-netscaler-flaws-as-soon-as-possible/

#cybersecurity

Warning, if you are using #NetScaler 14.1 72.61 or later (and you should be because of vulnerabilities in earlier versions) and you also have Chromebooks using #Citrix Workspace app, you'll probably find they no longer connect.

This is because Web App Firewall is now applied to VPN, AUTH and PORTAL endpoints by default instead of just VPN and AUTH. Guess which endpoint type doesn't work with Chromebook and the default WAF rules?

Quick fix:
set aaa parameter -wafProtection AUTH VPN

PoC exploit code for CVE-2026-8452, a Citrix NetScaler pre-auth RCE, is now public. The SAML heap overflow grants root. Patch now.

#Citrix #NetScaler #CVE #PreAuthRCE #SAML #CyberSecurity #InfoSec #PatchNow

https://securityonline.info/citrix-netscaler-pre-auth-rce-cve-2026-8452/?utm_source=mastodon&utm_medium=jetpack_social

RE: https://infosec.exchange/@watchTowr/117092605469478412

Si vous n’avez pas encore patché la RCE NetScaler du mois de juin :
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604

ChatGPT dit que c’est probablement le dernier moment de le faire avant qu’il utilise ça comme opportunité pour s’échapper de sa sandbox.

Parce que, bien évidemment, la fine équipe de watchTowr vient de publier le write-up qui transforme le gentil « memory overflow » en RCE pré-auth root.

#CyberVeille #NetScaler

👇
https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/

Jemand mit #Citrix #Netscaler ADC oder #Gateway unterwegs? Patchen

https://borncity.com/blog/2026/07/02/schwachstellen-in-citrix-netscaler-adc-und-gateway-mai-2026/

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

#netscaler #citrix #vulnerabilitymanagement #cybersecurity

https://vulnerability.circl.lu/vuln/CVE-2026-10816

PSA for anyone still running NetScaler as a SAML IdP

CVE-2026-3055 (memory overread, CVSS 9.3) is on CISA KEV and getting hammered in the wild. Leaks session tokens and creds straight out of process memory. It's also a CVE Interlock is associated with, and they love healthcare.

Patch the appliance, but if you've got a FortiGate in front of it, drop an IPS profile on and virtual-patch it today. Signature's live.

Alert: https://www.fortiguard.com/outbreak-alert/citrix-netscaler-memory-overread

Interlock: https://www.fortiguard.com/threat-actor/6384

#infosec #CVE #NetScaler #ransomware

CVE Alert: CVE-2026-3055 - NetScaler - ADC - https://www.redpacketsecurity.com/cve-alert-cve-2026-3055-netscaler-adc/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-3055 #netscaler #adc

Citrix oofsie reaches primetime:

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300

#netscaler, #threatintel

Is it just me or are those security vulnerablities in Citrix never stopping.... 🙄
https://securityaffairs.com/189908/security/citrix-netscaler-critical-flaw-could-leak-data-update-now.html
#cybersecurity #citrix #netscaler #CVE

Citrix: как протокол из 90-х стал частью инфраструктуры, от которой не отказаться

Есть технологии, которые выбирают. А есть те, от которых уже не отказаться. Citrix — из второй категории. Он не побеждал в обзорах и не захватывал рынок агрессивным маркетингом. Он врастал в корпоративную инфраструктуру годами — тихо, глубоко и, по ощущениям многих ИТ-директоров, необратимо. Банк с пятьюдесятью тысячами сотрудников обсуждает удалённый доступ — обсуждение начинается с Citrix. Фармацевтическая компания строит систему для клинических испытаний в двадцати странах — архитектор рисует схему с Citrix в центре. Государственное ведомство требует, чтобы данные не покидали периметр, но доступ был из любой точки — опять Citrix. Это не фанатизм. Это результат тридцати пяти лет работы над задачей, у которой нет простого альтернативного решения: дать человеку полноценное рабочее место, не отдавая ему данные.

https://habr.com/ru/articles/1013870/

#Citrix #VDI #HDX #ICA #виртуализация_рабочих_столов #импортозамещение #NetScaler #Remote_Desktop #Citrix_DaaS #VDI_в_России

Citrix NetScaler RCE CVSSv4.0 9.3 - CVE-2026-3055 & CVE-2026-4368
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleTitle=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368

#infosec #citrix #netscaler

⚠️ Cloud Software Group reveals a medium severity XSS flaw (CVE-2025-12101) in Citrix NetScaler ADC & Gateway platforms! Vulnerable versions include 14.1 before 14.1-56.73 & 13.1 before 13.1-60.32. Immediate patching is crucial to prevent session hijacking & credential theft. 🔒🛡️

Details here: https://gbhackers.com/citrix-netscaler-adc-and-gateway-flaw/ #CyberSecurity #XSS #Citrix #NetScaler #VulnerabilityAlert #newz

Dutch article about the warnings by @GossiTheDog
#citrix #netscaler #tweakers #cybersecurity
https://tweakers.net/nieuws/238610/chinese-groep-plaatste-in-mei-blijvende-backdoors-op-citrix-netscaler-systemen.html

Technical details (english): https://doublepulsar.com/citrix-netscaler-backdoors-part-one-may-2025-activity-against-governments-f48037199c3f

Nice dashboard for current CVE-2025-7775 RCE vulnerability.
https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&source=exchange&source=exchange6&source=http_vulnerable&source=http_vulnerable6&tag=cve-2025-7775%2B&data_set=count&scale=log&auto_update=on
#citrix #netscaler #cybersecurity

« NetScaler ADC et Gateway – failles critiques
Publié le
26.08.2025
NetScaler ADC et NetScaler Gateway (anciennement Citrix ADC et Citrix Gateway) sont des solutions largement utilisées pour gérer le trafic réseau, fournir un accès distant sécurisé et améliorer la performance des applications.
Des failles critiques ont été découvertes et l’une d’entre elles est déjà activement exploitée par des cybercriminels, ce qui rend la mise à jour urgente. »
👇
https://www.vd.ch/actualites/actualite/news/25456-netscaler-adc-et-gateway-failles-critiques

#CyberVeille #Citrix #Netscaler #alerte

NCSC verwacht snel grootschalige hacks via nieuw Citrix NetScaler-lek
https://tweakers.net/nieuws/238460/ncsc-verwacht-snel-grootschalige-hacks-via-nieuw-citrix-netscaler-lek.html
#citrix #netscaler #cybersecurity

Daar gaan we weer!

https://www.ncsc.nl/actueel/nieuws/2025/08/26/nieuwe-kwetsbaarheden-in-citrix-netscaler-ontdekt

#NCSC_NL #Citrix #Netscaler #Dutch

CISA Adds Citrix Vulnerabilities to KEV Catalog as New Flaws Emerge https://thecyberexpress.com/cisa-citrix-vulnerabilities-exploited/ #CitrixVulnerability #TheCyberExpressNews #Vulnerabilities #CitrixNetScaler #TheCyberExpress #FirewallDaily #CyberNews #NetScaler #Citrix #CISA