Crítico

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

Alerta · Publicado 27/09/2026

Resumen ejecutivo

CISA emite alerta de seguridad: Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway. CVEs relacionados: CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775.

Descripción técnica

Descripción

CISA is amplifying Citrix’s disclosure of eight new vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway products: CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778.  CISA has added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog. Both are critical, zero-day vulnerabilities that can independently enable remote code execution. CISA has received reports and partner threat intelligence confirming that threat actors are actively exploiting these vulnerabilities globally. Because updating Citrix NetScaler appliances can be complex and may require downtime, CISA is issuing this Alert to help organizations assess exposure, prioritize mitigation, and a

CVEs mencionados

Fuente oficial

Alerta publicada por CISA / US-CERT. Consulta el advisory completo para detalles técnicos, indicadores de compromiso y mitigaciones específicas.

¿Qué hacer?

Revisar el advisory completo en el sitio oficial de CISA
Aplicar los parches o mitigaciones indicados por el fabricante
Evaluar el impacto en los sistemas propios antes de la fecha límite indicada en el advisory

Fuentes originales

⬤ CISA Advisory ↗ ⬤ CISA Alerts RSS ↗

cisa us-cert alerta cve-2026-88771 cve-2026-88772 cve-2026-88773 citrix

Esta alerta fue generada automáticamente a partir del CISA KEV Catalog.

← Volver a todas las alertas