Rumours of two actively exploited Citrix NetScaler zero-days

🚨 ACTIVE EXPLOITATION

• Rumours of two actively exploited Citrix NetScaler zero-days break containment
  Rumours of two actively exploited Citrix NetScaler zero-days have spread publicly, with Citrix declining to comment.
  • Applies to organizations running Citrix NetScaler appliances.
  • Two zero-day vulnerabilities are rumoured to be under active exploitation.
  • Citrix has not commented or confirmed the reports; rumours surfaced publicly on Reddit after circulating privately for a week.
  Sources 📎 Coverage: cyberplace.social · 👁 via @GossiTheDog@cyberplace.social

🔓 CVEs & KEV

• CVE-2026-100706 — kyverno — CVSS 9.4 — Kyverno Path Traversal: Namespace Tenant to Cluster Admin Escalation