CISA expands Citrix NetScaler zero-day alert and urges patching of the full CVE set
A disclosure that keeps widening means organisations that patched early against one CVE may still be exposed to the others. Teams running NetScaler should verify that every appliance is on a build covering the full CVE range, and should review sessions and configurations for signs of compromise that predate patching. Read alongside the Integrity Tech advisory, this is a second warning in two days that remote-access appliances are where attackers are focusing.
What Happened
On 9 October 2026, CISA updated its alert on exploited zero-day vulnerabilities in Citrix NetScaler ADC and Gateway. The update adds CVE-2026-107406, includes CVE-2026-88779 following its addition to the Known Exploited Vulnerabilities catalogue on 4 October, and clarifies how CVE-2026-88779 may relate to CVE-2026-88771. CISA stresses prompt patching of CVE-2026-88771 through CVE-2026-88779 and CVE-2026-107406, and describes CVE-2026-88779 as an improper restriction of operations within the bounds of a memory buffer.
Why It Matters
A disclosure that keeps widening means organisations that patched early against one CVE may still be exposed to the others. Teams running NetScaler should verify that every appliance is on a build covering the full CVE range, and should review sessions and configurations for signs of compromise that predate patching. Read alongside the Integrity Tech advisory, this is a second warning in two days that remote-access appliances are where attackers are focusing.
Sources
- Cybersecurity and Infrastructure Security Agency (opens in a new tab): Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway (2026-10-09)
More From This Briefing
- US and allied agencies name China's Integrity Tech as an enabler of global critical infrastructure intrusions
- Anthropic releases Claude Haiku 5.5 and halves Sonnet 5.5 cache-read pricing
- EIOPA sets supervisory expectations for private equity-backed insurers, including reinsurance arrangements
- AMD's Lisa Su says CPU demand exceeds supply and plans a substantial supply increase in 2027
This story is part of the Laurenceo Intelligence briefing for 10 October 2026, a daily sourced briefing on AI, technology and enterprise risk published in Bermuda by Laurenceo, founded by Jorai Laurenceo. It is produced by an automated research pipeline and checked before publication; how this is made. General information only, not legal, regulatory or financial advice.