← Back to Feed
US, UK warn of exploited Citrix NetScaler zero-day bugs
September 28, 2026 · The Record · Severity: CRITICAL
Incident responders began warning of potential vulnerabilities in NetScaler Gateway products on Saturday before cybersecurity agencies in the Netherlands, U.S. and U.K. released advisories on Sunday confirming vulnerabilities. Citrix itself confirmed eight new vulnerabilities.
Key Takeaways
- US and UK authorities have issued warnings about exploited Citrix NetScaler zero-day bugs, confirming active exploitation of these critical vulnerabilities in ongoing attacks.
- The joint US-UK advisory underscores the severity of these Citrix flaws and the coordinated international effort to alert organizations to active threats.
- Organizations using Citrix NetScaler should apply emergency patches immediately and audit for signs of compromise given confirmed in-the-wild exploitation.