27 September 2026
1. What is being reported?
Security researchers have found two previously unknown vulnerabilities in Citrix NetScaler, a common device used to manage internet traffic and remote access. These flaws let attackers execute commands on the device without permission, meaning they can take control remotely.
2. What this means in plain English
If your organisation uses Citrix NetScaler, hackers could exploit these flaws to access your systems, steal information, or disrupt services. This risk is higher because the vulnerabilities are already being actively used by criminals.
3. Could this affect a small business?
Small businesses using Citrix NetScaler devices or services that rely on them could be affected. Organisations not using Citrix NetScaler are unlikely to be impacted by these specific issues.
4. What to do now
- Check if your organisation uses Citrix NetScaler devices or services.
- Contact your IT provider or software supplier immediately to confirm if your devices are vulnerable.
- Apply any security updates or patches provided by Citrix as soon as they are available.
- Monitor your systems for unusual activity and report any concerns promptly.
5. Ask your IT provider
Can you confirm whether our Citrix NetScaler devices are affected by the recent remote code execution vulnerabilities, and have the necessary patches been applied?
6. Bottom line
If you use Citrix NetScaler, act quickly to check and update your devices to prevent hackers from exploiting these serious security flaws.
Information based on reputable security reporting and alerts from CISA KEV.