That Reddit rumor about Citrix notifying customers to take Netscaler servers offline because of actively exploited zero-days is apparently real: www.reddit.com/r/Citrix/com...
Confirmation 1: mastodon.social/@GossiTheDog...
Confirmation 2: www.linkedin.com/feed/update/...
Confirmation 1: mastodon.social/@GossiTheDog...
Confirmation 2: www.linkedin.com/feed/update/...
From the Citrix community on Reddit
Explore this post and more from the Citrix community
www.reddit.com
September 26, 2026 at 10:14 PM
That Reddit rumor about Citrix notifying customers to take Netscaler servers offline because of actively exploited zero-days is apparently real: www.reddit.com/r/Citrix/com...
Confirmation 1: mastodon.social/@GossiTheDog...
Confirmation 2: www.linkedin.com/feed/update/...
Confirmation 1: mastodon.social/@GossiTheDog...
Confirmation 2: www.linkedin.com/feed/update/...
Lesser Seen Zinlizards: this is Citrix, he's a space farmer, has a little station that grows sunflowers and void limes
March 20, 2026 at 3:12 AM
Lesser Seen Zinlizards: this is Citrix, he's a space farmer, has a little station that grows sunflowers and void limes
*Sigh*
The new reports of further exploitation of Citrix devices and all known observables have been added to our report/MISP feed.
ifin.network/t/multi...
#Citrix #PitScaler #ThreatIntel #ThreatIntelligence #IFIN
The new reports of further exploitation of Citrix devices and all known observables have been added to our report/MISP feed.
ifin.network/t/multi...
#Citrix #PitScaler #ThreatIntel #ThreatIntelligence #IFIN
Multiple Citrix Netscaler 0-Days Exploited
Last Updated: 2026-10-02T19:34:34Z (UTC) What’s Happening Citrix has disclosed 8 critical CVEs. https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 There’s also an associated blog post. Affected Versions Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 BEFORE 14.1-73.37 Citrix NetScaler ADC and Citrix NetScaler Gateway 13.1 BEFORE 13.1-64.23 Citrix NetScaler ADC FIPS BEFORE 14.1-73.37 FIPS Citrix NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.279 Indicato...
ifin.network
October 2, 2026 at 7:42 PM
*Sigh*
The new reports of further exploitation of Citrix devices and all known observables have been added to our report/MISP feed.
ifin.network/t/multi...
#Citrix #PitScaler #ThreatIntel #ThreatIntelligence #IFIN
The new reports of further exploitation of Citrix devices and all known observables have been added to our report/MISP feed.
ifin.network/t/multi...
#Citrix #PitScaler #ThreatIntel #ThreatIntelligence #IFIN
citrix finally admitted Citrix Bleed 2 is under exploitation!
by not commenting to press and then editing an old blog post doublepulsar.com/citrixbleed-...
by not commenting to press and then editing an old blog post doublepulsar.com/citrixbleed-...
CitrixBleed 2 situation update — everybody already got owned
Citrix acknowledge exploitation finally.
doublepulsar.com
July 14, 2025 at 7:13 PM
citrix finally admitted Citrix Bleed 2 is under exploitation!
by not commenting to press and then editing an old blog post doublepulsar.com/citrixbleed-...
by not commenting to press and then editing an old blog post doublepulsar.com/citrixbleed-...
Solid reporting here on the ongoing Citrix shituation.
Security researcher Kevin Beaumont and a threat intelligence company warn: New exploits are being actively exploited. Official information is missing.
Security researchers warn: New zero-day exploits in Citrix Netscaler?
Security researcher Kevin Beaumont and a threat intelligence company warn: New exploits are being actively exploited. Official information is missing.
www.heise.de
September 27, 2026 at 1:14 PM
Solid reporting here on the ongoing Citrix shituation.
citrix ist abgeschmiert fehlt nur noch db welt
October 17, 2025 at 8:38 AM
citrix ist abgeschmiert fehlt nur noch db welt
By me: Companies around the world are scrambling to patch their Citrix NetScaler systems against ongoing cyberattacks involving two zero-days. Mandiant says the mass-hacks date back at least to early September, with dozens of orgs known to be affected so far — a number that's expected to rise.
Assume compromise: Hackers are mass-exploiting Citrix NetScaler systems in ongoing cyberattacks
Organizations around the world are pulling affected Citrix NetScaler servers out of service, causing outages and public-facing disruption.
this.weekinsecurity.com
October 2, 2026 at 10:22 PM
By me: Companies around the world are scrambling to patch their Citrix NetScaler systems against ongoing cyberattacks involving two zero-days. Mandiant says the mass-hacks date back at least to early September, with dozens of orgs known to be affected so far — a number that's expected to rise.
Citrix Workspace mal meine Eier
February 13, 2025 at 8:05 AM
Citrix Workspace mal meine Eier
We've been continuously updating this post with the latest information—now including details on exploitation of CVE-2026-88772. And all relevant indicators have been added to our MISP feed.
ifin.network/t/multi...
#ThreatIntel #ThreatIntelligence #IFIN
ifin.network/t/multi...
#ThreatIntel #ThreatIntelligence #IFIN
Multiple Citrix Netscaler 0-Days Exploited
Last Updated: 2026-09-29T14:53:55Z (UTC) What’s Happening Citrix has disclosed 8 critical CVEs. https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 There’s also an associated blog post. Affected Versions Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 BEFORE 14.1-73.37 Citrix NetScaler ADC and Citrix NetScaler Gateway 13.1 BEFORE 13.1-64.23 Citrix NetScaler ADC FIPS BEFORE 14.1-73.37 FIPS Citrix NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.279 Indicato...
ifin.network
September 29, 2026 at 3:21 PM
We've been continuously updating this post with the latest information—now including details on exploitation of CVE-2026-88772. And all relevant indicators have been added to our MISP feed.
ifin.network/t/multi...
#ThreatIntel #ThreatIntelligence #IFIN
ifin.network/t/multi...
#ThreatIntel #ThreatIntelligence #IFIN
ok i'll bite was ist ein citrix (nur falsche ant worten)
May 5, 2026 at 9:24 AM
ok i'll bite was ist ein citrix (nur falsche ant worten)
⚠️ 📢 Sicherheitswarnung: Am 27.09.2026 veröffentlichte der Hersteller #Citrix ein Advisory zu insgesamt acht Sicherheitslücken in seinen Produkten NetScaler ADC und NetScaler Gateway. Hierin enthalten sind auch zwei #ZeroDay-Schwachstellen.
👉️ https://www.bsi.bund.de/dok/1209522
👉️ https://www.bsi.bund.de/dok/1209522
Version 1.0: Citrix NetScaler - Systeme werden über ZeroDay-Schwachstellen angegriffen
Am 27. September 2026 veröffentlichte der Hersteller Citrix ein Advisory [CIT26a] zu insgesamt acht Sicherheitslücken in seinen Produkten NetScaler ADC (ehemals Citrix ADC) und NetScaler Gateway (ehemals Citrix Gateway). Hierin enthalten sind auch zwei ZeroDay-Schwachstellen, zu denen sich im Lauf...
www.bsi.bund.de
September 28, 2026 at 1:04 PM
⚠️ 📢 Sicherheitswarnung: Am 27.09.2026 veröffentlichte der Hersteller #Citrix ein Advisory zu insgesamt acht Sicherheitslücken in seinen Produkten NetScaler ADC und NetScaler Gateway. Hierin enthalten sind auch zwei #ZeroDay-Schwachstellen.
👉️ https://www.bsi.bund.de/dok/1209522
👉️ https://www.bsi.bund.de/dok/1209522
CISA has confirmed two bugs in Citrix NetScaler are being exploited in active cyberattacks, CVE-2026-88771 and CVE-2026-88772, in a rare weekend drop of security news. www.cisa.gov/known-exploi...
Citrix has a support base article, confirming exploitation. support.citrix.com/support-home...
Citrix has a support base article, confirming exploitation. support.citrix.com/support-home...
September 27, 2026 at 7:58 PM
CISA has confirmed two bugs in Citrix NetScaler are being exploited in active cyberattacks, CVE-2026-88771 and CVE-2026-88772, in a rare weekend drop of security news. www.cisa.gov/known-exploi...
Citrix has a support base article, confirming exploitation. support.citrix.com/support-home...
Citrix has a support base article, confirming exploitation. support.citrix.com/support-home...
Kelly Loeffler owns three homes in Florida, one in Chicago, and a mansion in Georgia. Following a private Senate briefing on the pandemic, she bought stock in Citrix Systems (teleworking software), Oracle, and DuPont (protective equipment). Trump nominated her head of the SBA.
December 5, 2024 at 12:03 AM
Kelly Loeffler owns three homes in Florida, one in Chicago, and a mansion in Georgia. Following a private Senate briefing on the pandemic, she bought stock in Citrix Systems (teleworking software), Oracle, and DuPont (protective equipment). Trump nominated her head of the SBA.
Citrix braucht wieder ewig. 😑
October 8, 2023 at 6:50 AM
Citrix braucht wieder ewig. 😑
Citrix NetScaler 0-day active for weeks
Citrix NetScaler vulnerabilities (CVE-2026-88771, -88772) were actively exploited against critical sectors for weeks before disclosure. Users must check for compromise *before* patching.
Citrix NetScaler vulnerabilities (CVE-2026-88771, -88772) were actively exploited against critical sectors for weeks before disclosure. Users must check for compromise *before* patching.
September 30, 2026 at 11:05 AM
Citrix NetScaler 0-day active for weeks
Citrix NetScaler vulnerabilities (CVE-2026-88771, -88772) were actively exploited against critical sectors for weeks before disclosure. Users must check for compromise *before* patching.
Citrix NetScaler vulnerabilities (CVE-2026-88771, -88772) were actively exploited against critical sectors for weeks before disclosure. Users must check for compromise *before* patching.
Problemen bij ziekenhuizen met Citrix, patiënten kunnen dossier niet inzien
Problemen bij ziekenhuizen met Citrix, patiënten kunnen dossier niet inzien
Het Nationaal Cyber Security Centrum meldt dat er kwetsbaarheden zaten in het programma Netscaler van Citrix, die inmiddels verholpen zijn.
nos.nl
September 27, 2026 at 8:56 PM
Problemen bij ziekenhuizen met Citrix, patiënten kunnen dossier niet inzien
ich melde mich bei citrix an ich warte 4 min zu lange ich melde mich bei citrix an ich werde 5min abgelenkt ich melde mich bei citrix an ich hoffe diesmahhh ich melde mich bei citrix an
June 15, 2026 at 8:45 AM
ich melde mich bei citrix an ich warte 4 min zu lange ich melde mich bei citrix an ich werde 5min abgelenkt ich melde mich bei citrix an ich hoffe diesmahhh ich melde mich bei citrix an
Two recently patched Citrix NetScaler zero-days are seeing widespread mass-exploitation after detailed write-ups and POCs were published on Monday
www.greynoise.io/blog/swarmin...
x.com/LupovisDefen...
mastodon.social/@GossiTheDog...
www.greynoise.io/blog/swarmin...
x.com/LupovisDefen...
mastodon.social/@GossiTheDog...
Swarming Against Citrix 0-Day Exploitation
On 24 September 2026, a malicious cyber actor (MCA) used 149.104.78.141 to attempt zero-day exploitation against a Citrix NetScaler Gateway. At the time, there were no CVE-specific detections for the ...
www.greynoise.io
September 29, 2026 at 4:32 PM
Two recently patched Citrix NetScaler zero-days are seeing widespread mass-exploitation after detailed write-ups and POCs were published on Monday
www.greynoise.io/blog/swarmin...
x.com/LupovisDefen...
mastodon.social/@GossiTheDog...
www.greynoise.io/blog/swarmin...
x.com/LupovisDefen...
mastodon.social/@GossiTheDog...
Citrix round 2? (Yeah)
October 2, 2026 at 5:47 PM
Citrix round 2? (Yeah)
Citrix NetScaler: new critical vulns, same old story
Citrix patched eight CVEs in NetScaler yesterday, including three critical RCE flaws already under active exploitation. The recurring "patch dump, then active exploitation" for NetScaler is an annual tradition.
Citrix patched eight CVEs in NetScaler yesterday, including three critical RCE flaws already under active exploitation. The recurring "patch dump, then active exploitation" for NetScaler is an annual tradition.
September 29, 2026 at 6:38 PM
Citrix NetScaler: new critical vulns, same old story
Citrix patched eight CVEs in NetScaler yesterday, including three critical RCE flaws already under active exploitation. The recurring "patch dump, then active exploitation" for NetScaler is an annual tradition.
Citrix patched eight CVEs in NetScaler yesterday, including three critical RCE flaws already under active exploitation. The recurring "patch dump, then active exploitation" for NetScaler is an annual tradition.
soon, "it's always dns" will be replaced by "it's always Citrix"
*Sigh*
The new reports of further exploitation of Citrix devices and all known observables have been added to our report/MISP feed.
ifin.network/t/multi...
#Citrix #PitScaler #ThreatIntel #ThreatIntelligence #IFIN
The new reports of further exploitation of Citrix devices and all known observables have been added to our report/MISP feed.
ifin.network/t/multi...
#Citrix #PitScaler #ThreatIntel #ThreatIntelligence #IFIN
Multiple Citrix Netscaler 0-Days Exploited
Last Updated: 2026-10-02T19:34:34Z (UTC) What’s Happening Citrix has disclosed 8 critical CVEs. https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 There’s also an associated blog post. Affected Versions Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 BEFORE 14.1-73.37 Citrix NetScaler ADC and Citrix NetScaler Gateway 13.1 BEFORE 13.1-64.23 Citrix NetScaler ADC FIPS BEFORE 14.1-73.37 FIPS Citrix NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.279 Indicato...
ifin.network
October 2, 2026 at 7:44 PM
soon, "it's always dns" will be replaced by "it's always Citrix"
gerade wo ich was kompliziertes durchstiegen habe schmiert wieder citrix ab 503 doch mal meine eier
October 21, 2025 at 9:47 AM
gerade wo ich was kompliziertes durchstiegen habe schmiert wieder citrix ab 503 doch mal meine eier
Shoutout to the folks on that Citrix subreddit thread, the security researchers validating the bugs, and the random IT teams who proactively reached out to affected NetScaler customers over the weekend, all of whom did a far better job at mitigating the damage before Citrix joined the party.
September 27, 2026 at 8:01 PM
Shoutout to the folks on that Citrix subreddit thread, the security researchers validating the bugs, and the random IT teams who proactively reached out to affected NetScaler customers over the weekend, all of whom did a far better job at mitigating the damage before Citrix joined the party.