CVECVECVSS 9.5 / 9.3严重
Citrix在漏洞遭利用报告后披露NetScaler零日漏洞
SecurityWeek称,身份不明的攻击者于2026年9月中旬开始利用未披露的NetScaler ADC和Gateway漏洞;Dark Reading报道,Citrix于9月27日披露了两个关键NetScaler零日漏洞。
CVECVESecurityWeek称,身份不明的攻击者于2026年9月中旬开始利用未披露的NetScaler ADC和Gateway漏洞;Dark Reading报道,Citrix于9月27日披露了两个关键NetScaler零日漏洞。
| CVE 编号 | 受影响产品 | CVSS | 已被利用 | 类型 |
|---|---|---|---|---|
| CVE-2026-88771 | Citrix NetScaler ADC and Gateway deployments, including edge-facing deployments, were affected by the disclosed vulnerabilities. The reported exploited flaws include CVE-2026-88771 and CVE-2026-88772. | 9.5 / 9.3 | 未被利用 | 漏洞修补 |
| CVE-2026-88772 | Citrix NetScaler ADC and Gateway deployments, including edge-facing deployments, were affected by the disclosed vulnerabilities. The reported exploited flaws include CVE-2026-88771 and CVE-2026-88772. | 9.5 / 9.3 | 未被利用 | 漏洞修补 |
| CVE-2026-88778 | Citrix NetScaler ADC and Gateway deployments, including edge-facing deployments, were affected by the disclosed vulnerabilities. The reported exploited flaws include CVE-2026-88771 and CVE-2026-88772. | 9.5 / 9.3 | 未被利用 | 漏洞修补 |
| CVE-2026-126325 | PTC Windchill和FlexPLM,包括PTC列出的版本以及The Hacker News报告的受影响版本。 | 10.0 / 9.3 / 9.2 | 未被利用 | 漏洞修补 |
| CVE-2026-125883 | N-central Appliance 2026.4.0.31(预发布版本)是经验证攻击所针对的版本;大多数或全部漏洞应能在早期版本上运行。 | 未有评分 | ● 已被利用 | 漏洞修补 |
| CVE-2026-125878 | N-central Appliance 2026.4.0.31(预发布版本)是经验证攻击所针对的版本;大多数或全部漏洞应能在早期版本上运行。 | 未有评分 | ● 已被利用 | 漏洞修补 |