CVECVECVSS 9.5 / 9.3嚴重
Citrix在漏洞遭利用報告後披露NetScaler零日漏洞
SecurityWeek表示,不明人士於2026年9月中旬開始利用未披露的NetScaler ADC及Gateway漏洞;Dark Reading報道,Citrix於9月27日披露兩個嚴重NetScaler零日漏洞。
CVECVESecurityWeek表示,不明人士於2026年9月中旬開始利用未披露的NetScaler ADC及Gateway漏洞;Dark Reading報道,Citrix於9月27日披露兩個嚴重NetScaler零日漏洞。
| CVE 編號 | 受影響產品 | CVSS | 已被利用 | 類型 |
|---|---|---|---|---|
| CVE-2026-88771 | Citrix NetScaler ADC and Gateway deployments, including edge-facing deployments, were affected by the disclosed vulnerabilities. The reported exploited flaws include CVE-2026-88771 and CVE-2026-88772. | 9.5 / 9.3 | 未被利用 | 漏洞修補 |
| CVE-2026-88772 | Citrix NetScaler ADC and Gateway deployments, including edge-facing deployments, were affected by the disclosed vulnerabilities. The reported exploited flaws include CVE-2026-88771 and CVE-2026-88772. | 9.5 / 9.3 | 未被利用 | 漏洞修補 |
| CVE-2026-88778 | Citrix NetScaler ADC and Gateway deployments, including edge-facing deployments, were affected by the disclosed vulnerabilities. The reported exploited flaws include CVE-2026-88771 and CVE-2026-88772. | 9.5 / 9.3 | 未被利用 | 漏洞修補 |
| CVE-2026-126325 | PTC Windchill及FlexPLM,包括PTC列出的版本及The Hacker News報道的受影響版本。 | 10.0 / 9.3 / 9.2 | 未被利用 | 漏洞修補 |
| CVE-2026-125883 | N-central Appliance 2026.4.0.31(預發布版本)是經驗證攻擊所針對的版本;大部分或全部漏洞應可在較早版本上運作。 | 未有評分 | ● 已被利用 | 漏洞修補 |
| CVE-2026-125878 | N-central Appliance 2026.4.0.31(預發布版本)是經驗證攻擊所針對的版本;大部分或全部漏洞應可在較早版本上運作。 | 未有評分 | ● 已被利用 | 漏洞修補 |