Vulnerabilities

CVEs, zero-days, patches and actively exploited flaws.

Most important this week

CriticalAct nowExploitedCISA KEV

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) is being actively exploited, CISA warns

CISA added CVE-2026-88779 (Citrix NetScaler) to its Known Exploited Vulnerabilities catalog on October 4, 2026, which means there is reliable evidence of exploitation in the wild. Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.

Why it matters

CISA lists this as exploited in the wild. Unpatched NetScaler ADC / Gateway systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities · 5 sources

Government advisoryCISA Known Exploited Vulnerabilities
Government advisoryCISA Cybersecurity Advisories
Original reportingBleepingComputer
Additional reportingSecurityWeek
Additional reportingThe Hacker News

2 days agoEnterpriseSecurity pros

HighReview

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications.

Dark Reading6 hours agoEnterpriseDevelopers

HighPatch

New Dell System Update flaw lets hackers gain root privileges

Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible.

Patch

Apply the vendor's security update for the affected products.

BleepingComputer13 hours agoSecurity pros

All Vulnerabilities stories

6 hours ago

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) is being actively exploited, CISA warns

CriticalAct nowExploitedCISA KEVCISA Known Exploited Vulnerabilities5 sources

3 days ago

Vulnerabilities

Most important this week

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) is being actively exploited, CISA warns

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

New Dell System Update flaw lets hackers gain root privileges

All Vulnerabilities stories

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

US, Australia warn of latest Citrix vulnerability after NetScaler advisory

New Dell System Update flaw lets hackers gain root privileges

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

Google halts open-source bug bounty program amid AI spam surge

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) is being actively exploited, CISA warns

Fortra Patches Critical Vulnerabilities in BoKS

Frontline Education breach exposes school district employee data

Warlock ransomware breach SharePoint in water, telecom operator attacks

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

SWIFT Banking & Government Middleware Enables RCE

GitLab warns of critical RCE vulnerability in AI Gateway service

In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats

'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries

Vulnerability Backlogs Are an Ownership Problem

Dell asks admins to patch max severity CSM flaws as soon as possible

Zammad GmbH Zammad Improper Privilege Management Vulnerability (CVE-2026-102490) is being actively exploited, CISA warns

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

Microsoft says threat actors are ahead in the early AI race