Citrix
Citrix NetScaler Updates Fix CVE-2026-88779
Citrix NetScaler CVE-2026-88779 is now in CISA KEV. Validate SAML exposure, update by October 7, triage, and preserve evidence.
Citrix NetScaler Fixes Eight Flaws; Exploitation Observed
Citrix reports exploitation of two NetScaler flaws in this update set. Patch every affected customer-managed appliance and HA peer, coordinate forensic triage, and separately apply the required enhanced-ISN configuration where applicable.
CVE-2026-3055: Citrix NetScaler Out-of-Bounds Read Vulnerability
NetScaler memory overread requires SAML identity-provider configuration, not the gateway prerequisite of the neighboring CVE. Match standard or FIPS/NDcPP update branches and investigate suspected disclosure separately; CISA's exploitation listing does not establish appliance compromise.
CVE-2026-8452: NetScaler memory-bounds flaw can cause denial of service
NetScaler memory-boundary failures can interrupt ADC or Gateway service. Match the appliance edition, configuration and build to the fixed release; this CVE does not establish authentication bypass or code execution.
CVE-2026-19490: NetScaler Gateway and AAA authentication bypass
NetScaler appliances configured as Gateway or AAA virtual servers can permit unauthenticated access. Check the exact edition and build, upgrade affected customer-managed instances, and preserve evidence for the separate compromise review.