🏢 Citrix Organization

Mandiant and Google Threat Intelligence Group report active exploitation since at least early September 2026 of two zero-day vulnerabilities affecting Citrix NetScaler ADC and Gateway appliances: CVE-

Attackers exploited a critical zero-day vulnerability in Citrix NetScaler appliances for more than three weeks before the activity was publicly confirmed, giving them time to compromise organizations

A reported emergency involving Citrix NetScaler ADC and Gateway appliances concerns two alleged, unpatched pre-authentication remote-code-execution zero-days being exploited in the wild. According to

The content is a daily CVE briefing page that explains major vulnerabilities in plain English for security teams. It highlights the day’s featured issue, CVE-2026-3502, a TrueConf Client update integr