Every ZeroDayFeed story on Citrix — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
CISA has put both PHP2Shell bugs (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) in its Known Exploited Vulnerabilities catalog with an Oct. 29 deadline, days after a researcher confirmed unauthenticated code execution against honeypots. Censys counts more than 32.5 million PHP services still on affected versions.
Read the story →Two NetScaler ADC and Gateway flaws rated CVSS v4 9.5 were exploited before disclosure; CVE-2026-88771 was then attacked widely after a public PoC. Responders found stolen config archives and webshells, and CISA's September 30 deadline has passed.
Citrix says attackers are targeting CVE-2026-88779, a memory-buffer flaw in SAML-configured NetScaler ADC and Gateway appliances, and CISA's October 7 federal patch deadline has now passed.
Free daily briefing — breaches, actively exploited bugs, ransomware, and the patches to prioritize.
You're in. ✓
Check your inbox to confirm your subscription.No spam. Unsubscribe any time. Read our privacy policy.
