Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of these 2 critical vulnerabilities in the wild. CERT-EU recommends updating affected software and running a compromise assessment on those exposed on the internet.
Read at CERT-EU Security Advisories
- Vendor
- Citrix
- Product
- NetScaler ADC / Gateway
- Exploitation
- observed in the wild
- Exposure class
- Edge / VPN / firewall
Why it ranks 52 (High)
- Exploitation observed in the wild
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Citrix)
- CERT coordination
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CERT-EU Security Advisories (cert.europa.eu)
Related coverage
Other items that share a CVE or were clustered with this one.