📋 ADVISORIES
- Citrix NetScaler CVE-2026-88779 memory overflow flaw exploited in the wild to crash SAML gateways
CVE-2026-88779
Citrix confirms attackers are actively exploiting a memory overflow vulnerability (CVE-2026-88779) in NetScaler ADC and Gateway SAML configurations to cause denial of service.- Applies to customer-managed NetScaler ADC and Gateway appliances using SAML authentication with a Gateway or AAA virtual server; Citrix-managed cloud services are already patched.
- The flaw (CWE-119, CVSS 4.0 8.7) is a memory overflow leading to denial of service; repeated triggering can leave the service unavailable, with no impact on customer data integrity.
- Citrix has observed targeted attacks on unmitigated deployments, with internet-facing appliances repeatedly rebooting; affected configs contain 'add authentication samlAction' or 'add authentication samlIdPProfile'.
- Affected versions: ADC and Gateway before 14.1-73.41 and 13.1-64.28, ADC FIPS before 14.1-73.41 FIPS, and FIPS/NDcPP before 13.1-37.282; fixed builds are 14.1-73.41, 13.1-64.28, 14.1-73.41 FIPS, and 13.1-37.282.
- The flaw resembles CVE-2025-6543, which was leveraged for RCE; no public PoC exploit code has been confirmed.
Sources 📄 Source: support.citrix.com · 📎 Coverage: securityonline.info · 👁 via @GossiTheDog@cyberplace.social
📋 ADVISORIES
- 📄 Source for TranslatePress WordPress plugin XSS flaw CVE-2026-103062 disclosed (CVSS 7.1) — patchstack.com
🔓 CVEs & KEV
CVE-2026-97276 — VeronaLabs WP Statistics — CVSS 7.1 — WordPress WP Statistics plugin through 14.16.14 - Cross Site Scripting (XSS) vulne...
CVE-2026-103354 — Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks — CVSS 7.1 — WordPress Gutenberg Blocks by Kadence Blocks plugin through 3.7.11.1 - Cross Site ...