⚡ Weekly Recap: Net Scaler and Forti Mail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

Summary: Citrix released security updates for a high-severity memory overflow vulnerability in NetScaler ADC and NetScaler Gateway, tracked as CVE-2026-88779 with a CVSS score of 8.7 out of 10.0, which has been exploited in targeted zero-day attacks and requires the product to be configured as a SAML service provider or SAML identity provider. The weekly roundup also lists dozens of other CVEs marked for urgent patching across Wireshark, ServiceNow, WordPress, GitLab, Apache Tomcat, IBM Financial Transaction Manager, NVIDIA, Cisco, Mozilla Firefox, Google Chrome, and other products.
What you should know: The exploited NetScaler flaw only bites when SAML is configured, so the gateways your identity federation depends on are the ones carrying an 8.7-severity bug under active attack - and it sits in a patch list long enough that triage order, not patch volume, decides what gets fixed first.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-100756 CVE-2026-100793 CVE-2026-101891 CVE-2026-101898 CVE-2026-10190 CVE-2026-102095 CVE-2026-102102 CVE-2026-102103 CVE-2026-102104 CVE-2026-102105 CVE-2026-102106 CVE-2026-102115 CVE-2026-102147 CVE-2026-102149 CVE-2026-102331 CVE-2026-102489 CVE-2026-102490 CVE-2026-12530 CVE-2026-12703 CVE-2026-13016 CVE-2026-16444 CVE-2026-16796 CVE-2026-17635 CVE-2026-17645 CVE-2026-18132 CVE-2026-18137 CVE-2026-18162 CVE-2026-18163 CVE-2026-18169 CVE-2026-18177 CVE-2026-18872 CVE-2026-19042 CVE-2026-19743 CVE-2026-42356 CVE-2026-42528 CVE-2026-42542 CVE-2026-44639 CVE-2026-54154 CVE-2026-63292 CVE-2026-65113 CVE-2026-65114 CVE-2026-65121 CVE-2026-65127 CVE-2026-65128 CVE-2026-65130 CVE-2026-73581 CVE-2026-74849 CVE-2026-75939 CVE-2026-75973 CVE-2026-76183 CVE-2026-76504 CVE-2026-76708 CVE-2026-76709 CVE-2026-76710 CVE-2026-77791 CVE-2026-78383 CVE-2026-78437 CVE-2026-79677 CVE-2026-84411 CVE-2026-84782 CVE-2026-85065 CVE-2026-85066 CVE-2026-86102 CVE-2026-86131 CVE-2026-86248 CVE-2026-86350 CVE-2026-86552 CVE-2026-86553 CVE-2026-86554 CVE-2026-86555 CVE-2026-86857 CVE-2026-86858 CVE-2026-86859 CVE-2026-86860 CVE-2026-87022 CVE-2026-87969 CVE-2026-88779 CVE-2026-89078 CVE-2026-89102 CVE-2026-91765 CVE-2026-92368 CVE-2026-92369 CVE-2026-92370 CVE-2026-92371 CVE-2026-93302 CVE-2026-93485 CVE-2026-93577 CVE-2026-94384 CVE-2026-95389 CVE-2026-95391 CVE-2026-96419 CVE-2026-96421 CVE-2026-96512 CVE-2026-96760
Related: ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats Cyber Risks ·
Critical Git Lab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases Cyber Risks ·
⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More Cyber Risks ·