CERT24Citrix patches actively exploited NetScaler SAML zero-dayLoading data…
CERT24Threat Observatory
Period

Citrix patches actively exploited NetScaler SAML zero-day

Citrix has released emergency updates for CVE-2026-88779, a memory buffer vulnerability in NetScaler ADC and NetScaler Gateway that has been actively exploited in targeted attacks. Citrix describes the issue as causing denial-of-service conditions in affected SAML configurations. Researchers are investigating whether it can also be used for remote code execution.

← Back to intelligence

Citrix patches actively exploited NetScaler SAML zero-day

Citrix has released emergency updates for CVE-2026-88779, a memory buffer vulnerability in NetScaler ADC and NetScaler Gateway that has been actively exploited in targeted attacks. Citrix describes the issue as causing denial-of-service conditions in affected SAML configurations. Researchers are investigating whether it can also be used for remote code execution.