Tue, Oct 20 Vulnerabilities and patches
- Exploited
- In KEV
Citrix NetScaler flaws chained to gain root and plant web shells, Rapid7 says
Neither flaw needs credentials, and builds 14.1-73.41 and 13.1-64.28 fix both, but Rapid7 says patching alone isn’t enough for appliances exposed to the attacks.
Rapid7, source for item 1 on Tue, Oct 20Citrix security bulletin CTX697096, source for item 1 on Tue, Oct 20Citrix security bulletin CTX697174, source for item 1 on Tue, Oct 20CISA KEV catalog, CVE-2026-88771, source for item 1 on Tue, Oct 20CISA KEV catalog, CVE-2026-88779, source for item 1 on Tue, Oct 20