Citrix patches NetScaler SAML zero-day exploited in attacks

· Cybersecurity

Citrix released emergency updates for a new NetScaler denial-of-service flaw tracked as CVE-2026-88779, which has already been exploited in zero-day attacks. Researchers are investigating whether the bug can also be leveraged for remote code execution.

Why it matters：NetScaler gateways are widely deployed at the network edge, so an exploited flaw there can expose identity and access paths for large organizations until patching is complete.

Key points

  • Emergency updates were issued for a NetScaler denial-of-service bug.
  • The flaw is tracked as CVE-2026-88779 and was exploited in zero-day attacks.
  • Researchers are checking whether it can also achieve remote code execution.

Sources (original reporting)

More stories from this day