exploit · Sun 27 Sep 2026 · 16:55 UTC
Actively exploitedNCSC-2026-0394 [1.01] [H/H] Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway
Filed UTCSource NCS ↗
Citrix heeft 8 kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De volgende ondersteunde versies van Citrix NetScaler ADC en Citrix NetScaler Gateway zijn kwetsbaar: - Citrix NetScaler ADC en Citrix NetScaler Gateway 14.1 vóór versie 14.1-73.37 - Citrix NetScaler ADC en Citrix NetScaler Gateway 13.1 vóór versie 13.1-64.23 - Citrix NetScaler ADC FIPS vóór versie 14.1-73.37 FIPS - Citrix NetScaler ADC FIPS en NDcPP vóór versie 13.1-37.279 Secure Private Access Hybrid-implementaties die gebruikmaken van NetScaler-instances zijn ook kwetsbaar voor deze kwetsbaarheden. …
Signals
as the pipeline stamped them- KEV
- Active exploitation (KEV)
- What to do
- On CISA KEV — actively exploited. Patch immediately.
CISA KEV means this flaw has been seen exploited in real attacks — not predicted, observed. Treat it as urgent regardless of its score.
CVE · 8
KEV from CISA · EPSS from FIRST| Id | KEV | EPSS | Reference |
|---|---|---|---|
| CVE-2026-88771 | KEV | 1% | NVD ↗ |
| CVE-2026-88772 | KEV | 1% | NVD ↗ |
| CVE-2026-88773 | — | 0.36% | NVD ↗ |
| CVE-2026-88774 | — | 0.24% | NVD ↗ |
| CVE-2026-88775 | — | 0.38% | NVD ↗ |
| CVE-2026-88776 | — | 0.38% | NVD ↗ |
| CVE-2026-88777 | — | 0.38% | NVD ↗ |
| CVE-2026-88778 | — | 0.38% | NVD ↗ |
Get the next one first.
Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.