Critical RCE Vulnerabilities in Citrix NetScaler ADC and Gateway

# Critical RCE Vulnerabilities in Citrix NetScaler ADC and Gateway

https://gcdradar.vercel.app/incidents/critical-rce-vulnerabilities-in-citrix-netscaler-adc-and-gat · AIR-2026-1573 · live

- Lane: Patch now
- Severity: 3 (Confirmed exploitation): Active exploitation in the wild was confirmed by Citrix.
- Fix status: No patch yet
- First reported: 2026-10-27 (happened 2026-09-27)
- AI role: No AI role
- Products: NetScaler ADC, NetScaler Gateway

## Summary

Citrix NetScaler ADC and Gateway contain critical unauthenticated remote code execution vulnerabilities that are actively exploited in the wild. Administrators must update affected software and perform a compromise assessment.

## What to do

Update affected Citrix NetScaler ADC and Gateway software and run a compromise assessment.

## Affected and fixed versions

- Affected: Citrix NetScaler ADC
- Affected: Citrix NetScaler Gateway

## Latest updates

- 2026-10-27: 2026-010: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway (https://cert.europa.eu/publications/security-advisories/2026-010)
- 2026-10-27: 2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway (https://cert.europa.eu/publications/security-advisories/2026-014)

## Sources

- 2026-10-27 CERT-EU: 2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway https://cert.europa.eu/publications/security-advisories/2026-014
- 2026-10-27 CERT-EU: 2026-010: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway https://cert.europa.eu/publications/security-advisories/2026-010
- 2026-10-27 SecurityWeek: This is Fine: What NetScaler Zero-Days Tell Us About the New Normal https://securityweek.com/this-is-fine-what-netscaler-zero-days-tell-us-about-the-new-normal

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.