Cybersecuritynews Critical Vulnerabilities in Citrix NetScaler ADC and Gateway Require Immediate Patching
Article Content
- •Two critical vulnerabilities in Citrix NetScaler ADC and Gateway require immediate updates.
- •CVE-2026-3055 has a CVSS score of 9.3, indicating a severe risk of data leakage.
- •Organizations are advised to consult Citrix Security Bulletin CTX696300 for remediation guidance.
Cloud Software Group has identified and patched two critical vulnerabilities in Citrix NetScaler ADC and Gateway products. The vulnerabilities, tracked as CVE-2026-3055, allow unauthenticated remote attackers to exploit memory overreads and potentially leak sensitive data. Organizations using these systems are urged to apply the updates immediately to mitigate risks. The vulnerabilities were discovered during an internal review and have been addressed in a security bulletin issued on March 23, 2026. The CVSS score for CVE-2026-3055 is 9.3, indicating a high level of severity. Affected organizations should refer to Citrix Security Bulletin CTX696300 for detailed information and remediation steps. The urgency of the situation is underscored by the potential for exploitation leading to serious data breaches. Administrators are advised to prioritize these updates to protect their systems from possible attacks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (30)
Following this threat?
Track Citrix and CVE-2026-3055 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Vulnerabilities in Citrix NetScaler Under Active Exploitation On September 26, 2026, security firm watchTowr reported two unpatched zero-day vulnerabilities in Citrix NetScaler ADC and Gateway appliances, allowing remote code execution (RCE) and actively exploited in the wild. Citrix has confirmed the existence of these vulnerabilities, tracked as CVE-2026-88771 and… 
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-2026-88771 arises…