This latest exploit follows a series of three distinct flaws weaponized against NetScaler in a single week. CISA has released a SIGMA detection rule to identify the activity, while Finland's NCSC-FI cautioned that patching alone cannot purge adversaries who have already established root access. Mandiant researchers found that earlier flaws in the current attack chain were exploited as early as Sept 3, impacting government and financial sectors across North America and Europe.
Tuesday, October 20, 2026
Story
New NetScaler CVE Hits Versions Admins Just Patched for Zero Days
Cybersecurity12 days ago
Citrix has issued emergency guidance for CVE-2026-107406, a new critical vulnerability affecting NetScaler ADC and NetScaler Gateway appliances. The flaw impacts the specific software versions that administrators recently installed to mitigate prior zero-day attacks, leaving those systems exposed despite recent updates. System administrators have reported suspicious activity, including repeated reboots and crashing of the nsaaad daemon, on version 14.1-73.37, which was one of the previous official fixes.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.