# Two unpatched NetScaler flaws reportedly exploited in attacks

_Published Sunday, September 27, 2026 at 2:19 AM EDT · Security, Infrastructure · Latest · Tier 2 — Notable_

![Two unpatched NetScaler flaws reportedly exploited in attacks — Primary](https://cybersecuritynews.com/wp-content/uploads/2026/09/NetScaler-0-Day-RCE.webp)

Security firm watchTowr says attackers have exploited two previously undisclosed flaws that could allow remote code execution on Citrix NetScaler appliances. The firm said it identified the flaws during forensic investigations and expects Citrix communications and fixes early next week.

Citrix had not issued an advisory for the reported flaws when the article was written. Without affected build numbers or technical details, administrators cannot determine from this report alone which appliances are vulnerable. Some organizations have reportedly shut down internet-exposed NetScaler systems, potentially interrupting VPN access and application delivery.

## Sources

- [cybersecuritynews.com](https://cybersecuritynews.com/citrix-netscaler-0-day-rce-2/)

---
Canonical: https://techandbusiness.org/newswire/FP4o2aVrwQ8zgm30h7QWTV
Published: 2026-09-27T06:19:47.719Z
Story chronology: 2026-09-27T04:07:25.000Z
Retrieved: 2026-09-27T08:04:04.823Z
Publisher: Tech & Business (techandbusiness.org)