certeu-2026-014
certeu
Description
On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of these 2 critical vulnerabilities in the wild.<br> CERT-EU recommends updating affected software and running a compromise assessment on those exposed on the internet.<br>
Timeline
- Published
- Sun, 27 Sep 2026 19:40:52 CEST
- Last Modified
- Sun, 27 Sep 2026 19:40:52 CEST
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"datePublished": "Sun, 27 Sep 2026 19:40:52 CEST",
"description": "On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of these 2 critical vulnerabilities in the wild.<br>\nCERT-EU recommends updating affected software and running a compromise assessment on those exposed on the internet.<br>",
"id": "CERTEU-2026-014",
"link": "https://cert.europa.eu/publications/security-advisories/2026-014/",
"source": "certeu",
"title": "2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway"
}