Threat Watch– active
All incidents
More on Threat Watch
More Citrix incidents
- Ivanti EPM SQLi RCE (CVE-2026-121653) and CSA auth bypass (CVE-2026-121683) in a 19-flaw Patch Tuesday Critical · Patch now
- Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) High · Patch now · Closed
- Citrix NetScaler ADC/Gateway zero-days: two pre-auth RCEs exploited since early September, plus an exploited SAML flaw (CVE-2026-88771, CVE-2026-88772, CVE-2026-88779) Critical · Patch now · Closed
- Citrix NetScaler Improper Input Validation Vulnerability (CVE-2026-88771) Critical · Patch now · Closed
- Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88772) High · Patch now · Closed
- Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-19490) Critical · Patch now · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.