[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8yWMLUrkKSKUJfgXLg_-nmUarsyBe89actijJJ7zno0":3},{"article":4,"iocs":49,"watch_terms":57,"solutions":58,"lesson":151},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"236abf79-098e-44f1-91d9-3f076398ca9c","Citrix discloses third actively exploited NetScaler zero-day in less than a week","citrix-discloses-third-actively-exploited-netscaler-zero-day-in-less-than-a-week-24ac4b","The vendor was much quicker and consistent in its response to the latest defect, and researchers consider the impact relatively low compared to the previous pair of zero-days. The post Citrix discloses third actively exploited NetScaler zero-day in less than a week appeared first on CyberScoop.","Citrix has disclosed a third actively exploited zero-day vulnerability, CVE-2026-88779, in its NetScaler products. While less severe than previous vulnerabilities, it can cause denial-of-service and potentially accelerate exploitation of other zero-days. Citrix's response was quicker this time, providing patches and advisories promptly.","Citrix discloses third actively exploited NetScaler zero-day vulnerability in less than a week.","https:\u002F\u002Fcyberscoop.com\u002Fcitrix-netscaler-third-exploited-zero-day-vulnerability\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2019\u002F03\u002FGettyImages-1091537722.jpg","2026-10-05T23:07:17+00:00","2026-10-06T00:00:50.039691+00:00",9,[17,20,23],{"name":18,"type":19},"NetScaler","product",{"name":21,"type":22},"Citrix","vendor",{"name":24,"type":25},"SAML","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,42,44],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":43},{"id":26,"icon":28,"name":29,"slug":30},{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54],{"type":51,"value":52,"context":53},"cve","CVE-2026-88779","Third actively exploited zero-day in Citrix NetScaler products.",{"type":51,"value":55,"context":56},"CVE-2026-88771","Previously disclosed zero-day that can be accelerated by CVE-2026-88779.",[21,18],{"controls":59,"vendors":145},[60,89,117],{"slug":61,"name":62,"problem":63,"products":64},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":90,"name":91,"problem":92,"products":93},"patch-management","Automated patch management","Known holes get closed in days, not months.",[94,101,109],{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":90,"product_name":98,"url":99,"description":100},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":48,"name":118,"problem":119,"products":120},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",[146],{"slug":147,"name":21,"logo_path":148,"roles":149},"citrix","\u002Fvendor-logos\u002Fcitrix.png",[150],"affected",{"slug":152,"title":153,"body":154,"framework_refs":155,"framework_notes":166},"third-citrix-netscaler-zero-day-in-a-week-highlights-patch-urgency","Third Citrix NetScaler Zero-Day in a Week Highlights Patch Urgency","Citrix disclosed a third actively exploited zero-day vulnerability (CVE-2026-88779) in NetScaler within less than a week, underscoring a dangerous clustering of critical flaws in widely deployed network infrastructure. Even though this vulnerability is rated less severe, its ability to cause denial-of-service and potentially chain with other zero-days amplifies overall organizational risk. NetScaler appliances are commonly internet-facing, making unpatched systems an immediately attractive target for threat actors. The rapid succession of disclosures reveals the importance of having mature, agile patch management processes that can respond to multiple simultaneous threats without overwhelming security teams.",[156,157,158,159,160,161,162,163,164,165],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 18: Penetration Testing","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST SC-7: Boundary Protection","NIST RA-5: Vulnerability Monitoring and Scanning","ITIL: Change and Release Management","ISO\u002FIEC 27001: A.12.6.1 Management of Technical Vulnerabilities","CISA KEV (Known Exploited Vulnerabilities) Catalog Guidance",{}]