Citrix NetScaler 제로데이 3건 잇달아 악용

기사 제목과 RSS 요약문을 바탕으로 AI가 정리했습니다. 세부 내용은 원문에서 확인하세요. · 10월 6일 15:01 작성

9월 말 미국·영국 당국이 NetScaler 취약점 악용을 경고했다. Citrix는 10월 4일 CVE-2026-88779 긴급 업데이트를 공개했고, 이후 보도들은 앞서 패치된 취약점들과 별도로 새 문제가 확인됐다고 전했다. Citrix는 새 문제가 지난주 보고된 취약점들과 관련 없다고 밝혔지만, 10월 6일 보도는 한 주도 안 돼 세 번째 악용 제로데이가 공개됐다고 전했다.

NetScaler 관리자는 각 취약점이 자사 장비에 영향을 주는지 확인하고, 해당되는 업데이트나 완화 조치를 적용해야 한다.

기사에 근거해 AI가 정리한 확인 항목입니다. 미래 결과를 예측하거나 확정한 내용은 아닙니다.

• 세 번째 취약점의 영향 범위와 Citrix의 업데이트·완화 안내가 구체화되는지 확인할 필요가 있다.

  근거와 원문 확인

  “Citrix discloses third actively exploited NetScaler zero-day in less than a week”

  Citrix discloses third actively exploited NetScaler zero-day in less than a week ↗

1. 9월 28일 09:00

   미국·영국 등이 악용 중인 NetScaler 취약점을 경고했다.

   US, UK warn of exploited Citrix NetScaler zero-day bugs
2. 10월 4일 09:00

   Citrix가 악용된 CVE-2026-88779에 대한 긴급 업데이트를 공개했다.

   Citrix patches NetScaler SAML zero-day exploited in attacks
3. 10월 5일 09:00

   보도에 따르면 Citrix는 새로 관찰된 문제가 지난주 취약점들과 무관하다고 밝혔다.

   US, Australia warn of latest Citrix vulnerability after NetScaler advisory
4. 10월 6일 09:00

   보도가 한 주도 안 돼 세 번째 악용 NetScaler 제로데이가 공개됐다고 전했다.

   Citrix discloses third actively exploited NetScaler zero-day in less than a week

재전송을 포함한 기사 136건입니다. 원문은 새 탭에서 열립니다.

• The Hacker NewsCritical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products10월 6일 15:58
• Hacker NewsSecurity researcher claims they found KVM guest-host escape flaw10월 6일 14:57
• The Hacker NewsClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits10월 6일 14:22
• Hacker NewsCitrix discloses third actively exploited NetScaler zero-day in less than a week10월 6일 09:41
• BleepingComputerRejetto HFS servers now actively scanned for critical RCE flaw10월 6일 05:20
• The RecordUS, Australia warn of latest Citrix vulnerability after NetScaler advisory10월 6일 02:22
• The Hacker NewsMicrosoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes10월 6일 01:21
• BleepingComputerNew Dell System Update flaw lets hackers gain root privileges10월 5일 23:53
• The Hacker News⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests10월 5일 23:20
• SecurityWeekLinux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws10월 5일 22:00
• The Hacker NewsRealtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C210월 5일 20:46
• Hacker NewsKVM Escape Zero-Day10월 5일 20:26
• SecurityWeekExploitation Hits Rejetto HFS Vulnerability Discovered by AI10월 5일 20:00
• The Hacker NewsAttackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE10월 5일 17:09
• The Hacker NewsNew NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline10월 5일 15:40
• SecurityWeekExploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier10월 5일 14:14
• BleepingComputerCitrix patches NetScaler SAML zero-day exploited in attacks10월 5일 06:58
• Hacker NewsXray-core concealed a certificate verification bypass vulnerability10월 5일 02:40
• Hacker NewsGuillermo Rauch: "We've confirmed a KVM 0day through our Vercel bounty program"10월 4일 01:40
• Hacker NewsKVM 0day10월 4일 00:40
• The Hacker NewsWarlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware10월 3일 23:36
• Hacker NewsHow recurring network maintenance exposed 6 bugs10월 3일 22:10
• SecurityWeekFortra Patches Critical Vulnerabilities in BoKS10월 3일 20:34
• The Hacker NewsGitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers10월 3일 02:33
• The Hacker NewsDell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes10월 3일 02:02
• BleepingComputerGitLab warns of critical RCE vulnerability in AI Gateway service10월 3일 01:20
• Hacker NewsFortinet sounds the alarm over actively exploited FortiMail zero-day10월 2일 23:08
• The Record'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries10월 2일 23:05
• BleepingComputerThe EDR blind spot: 3 ways browser attacks evade endpoint telemetry10월 2일 23:00
• SecurityWeekmacOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor10월 2일 22:15
• Hacker NewsFTP Backdoor Exploitation: From NMAP Reconnaissance to Root Access10월 2일 21:54
• BleepingComputerDell asks admins to patch max severity CSM flaws as soon as possible10월 2일 21:37
• Hacker NewsZammad zero-days for RCE and root (CVE-2026-102489/102490)10월 2일 19:23
• SecurityWeekWarlock Expands SharePoint Exploitation in Critical Infrastructure Attacks10월 2일 18:34
• SecurityWeekExploited Fortinet FortiMail Zero-Day Calls for Urgent Action10월 2일 17:07
• The Hacker NewsCritical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes10월 2일 14:49
• Hacker NewsMass exploitation of Citrix NetScaler: What we currently know10월 2일 09:08
• Hacker NewsSeveral vulnerabilities have been discovered in the Linux kernel10월 2일 08:23
• BleepingComputerFortinet warns of critical FortiMail flaw exploited in zero-day attacks10월 2일 07:42
• Hacker NewsFrom Select to Sysadmin: Hijacking Microsoft SQL Copilot (CVE-2026-65669)10월 2일 04:38
• BleepingComputerKiteworks patches max severity code injection vulnerability10월 1일 22:51
• SecurityWeekZimbra Vulnerability Exploited in the Wild Prior to Public Disclosure10월 1일 21:55
• SecurityWeekZammad Zero-Days Exploited in AI-Powered DIVD Hack10월 1일 19:42
• The Hacker NewsCISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV10월 1일 19:33
• Hacker NewsTanStack Start critical XSS in server functions (CVE-2026-102989)10월 1일 19:23
• Hacker NewsWe found a Claris FileMaker authorization bypass (CVE-2026-86934)10월 1일 17:38
• SecurityWeekCisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability10월 1일 17:26
• The Hacker NewsApple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path10월 1일 14:54
• The Hacker NewsCitrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs10월 1일 13:35
• Hacker NewsCVE-2026-86950: An in-the-wild iOS bug with a possible WhatsApp zero-click path10월 1일 08:23
• Hacker News16-year-old found Microsoft bug, got admin access to 17.3T-row databases10월 1일 06:22
• Ars TechnicaAttackers have been exploiting critical Zimbra flaw to steal emails10월 1일 05:44
• BleepingComputerDIVD says Zammad zero-days enabled AI-driven network breach10월 1일 04:49
• Hacker NewsThe Exploit Bulletin – a free daily brief of exploited vulns to act on today10월 1일 02:07
• The Hacker NewsAttackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets10월 1일 01:46
• BleepingComputerCISA warns of critical pre-auth RCE flaw in MikroTik RouterOS10월 1일 00:49
• The Hacker NewsCisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager10월 1일 00:24
• BleepingComputerCisco warns of new SD-WAN zero-day exploited in attacks9월 30일 23:46
• SecurityWeekWatchGuard Patches Critical Fireware OS Code Injection Vulnerability9월 30일 22:16
• SecurityWeekGovernment, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks9월 30일 21:48
• BleepingComputerTeamViewer urges users to patch severe flaws “as soon as possible”9월 30일 21:25
• SecurityWeekChrome, Firefox Updates Patch Over 100 Vulnerabilities9월 30일 21:16
• The Hacker NewsKnow Your Enemy: Browser-Based Attack Techniques in 20269월 30일 20:58
• The Hacker NewsAttackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT9월 30일 17:24
• SecurityWeekHigh-Severity Vulnerabilities Patched in OpenSSL, WolfSSL9월 30일 15:55
• The Hacker NewsCitrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution9월 30일 14:30
• Hacker NewsCustom malware used in Citrix 0-day attacks targeting govt, banks, professional9월 30일 09:22
• BleepingComputerHackers exploit Citrix NetScaler zero-day to deploy web shells9월 30일 03:37
• Hacker NewsApple patches CoreGraphics zero-day already exploited in targeted attacks9월 30일 02:22
• BleepingComputerNew Spectre v2 attack variant leaks Linux root password hash in minutes9월 30일 02:10
• The Hacker NewsNew Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses9월 30일 02:00
• SecurityWeekNew Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks9월 30일 02:00
• The Hacker NewsKiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown9월 29일 23:13
• TechCrunchStill running iOS 26? Update your iPhones, iPads, and Macs for this urgent security fix9월 29일 22:25
• Hacker NewsKestra Unauthenticated Remote Code Execution CVE-2026-498699월 29일 21:07
• Hacker NewsMCP Python SDK OAuth flaw enabled account takeover9월 29일 19:22
• BleepingComputerKiteworks patches critical flaw, brings customer systems online9월 29일 18:04
• BleepingComputerApple patches CoreGraphics zero-day flaw exploited in attacks9월 29일 16:33
• Hacker NewsCVE-2026-85706 (CVSS 10.0)9월 29일 15:36
• SecurityWeekApple Patches Zero-Day Linked to ‘Extremely Sophisticated Attack’9월 29일 15:18
• The Hacker NewsOfficial MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials9월 29일 15:08
• Hacker NewsTaking 'execute logging' a bit too literally CVE-2026-887719월 29일 08:06
• The Hacker NewsApple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks9월 29일 04:18
• Hacker NewsElastic Agentic SOC Vulnerable to Credential Theft9월 29일 02:36
• Hacker NewsActive, in-the-wild exploitation of CVE-2026-88771 with IoCs9월 29일 01:21
• The RecordUS, UK warn of exploited Citrix NetScaler zero-day bugs9월 29일 01:19
• Hacker NewsCitrix NetScaler PreAuth Command Injection CVE-2026-887719월 29일 00:21
• Hacker NewsOne resident login, an entire apartment complex: CVE-2026-759609월 28일 22:51
• SecurityWeekKiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability9월 28일 18:44
• Hacker NewsI found an SSRF in Google's official MCP Toolbox (CVE-2026-14540)9월 28일 16:36
• SecurityWeekCitrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug9월 28일 16:29
• The Hacker NewsCISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally9월 28일 16:21
• BleepingComputerCISA orders feds to patch exploited Citrix flaws by Wednesday9월 28일 15:24
• Hacker NewsCitrix NetScaler Remote Code Execution9월 28일 05:51
• BleepingComputerCitrix confirms two NetScaler RCE zero-days exploited in attacks9월 28일 01:02
• SecurityWeekMicrosoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks9월 27일 18:23
• The Hacker NewsWarning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation9월 27일 16:47
• Hacker NewsSix Bazel patches from an AI software factory, plus a remote-cache security bug9월 27일 02:54
• The Hacker NewsAttackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells9월 26일 20:46
• The Hacker NewsSharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild9월 26일 17:49
• BleepingComputerCISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks9월 26일 02:24
• Hacker NewsSomeone's attacking a critical 0-day RCE in F5 BIG-IP APM9월 26일 00:10
• Hacker NewsImminent Zero-Day Attack: KiteWorks Urges Customers to Shut Down Servers9월 25일 22:50
• Hacker NewsThe "FREAK" TLS/SSL flaw, and related thoughts9월 25일 21:49
• SecurityWeek‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration9월 25일 18:27
• Hacker NewsCVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 29월 25일 16:08
• The Hacker NewsWSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV9월 25일 13:46
• Hacker NewsVulnerability Cve-2026-829589월 25일 13:45
• Hacker NewsDecades-old file security flaws found in Android, Linux, macOS, and Windows9월 25일 04:05
• Hacker NewsCISA active Linux kernel CVEs (CVE-2025-39964, CVE-2026-53266, CVE-2025-39682)9월 25일 02:00
• BleepingComputerHackers now exploit critical Roundcube flaw in code injection attacks9월 24일 22:27
• BleepingComputerCISA: Ransomware gangs now exploiting critical TeamCity flaw9월 24일 19:42
• SecurityWeekSolarWinds Patches Critical RCE Flaws in Observability Self-Hosted9월 24일 19:40
• Hacker NewsHackers Actively Exploit Check Point VPN Flaw9월 24일 11:11
• BleepingComputerCheck Point warns of hackers exploiting Security Gateway VPN RCE flaw9월 24일 04:53
• The Hacker NewsMikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key9월 24일 01:06
• BleepingComputerInfraTrust report warns network management systems under attack9월 23일 23:35
• Hacker NewsLatest BGP hijack targets hosting software vendor9월 23일 21:30
• BleepingComputerArista patches actively exploited VeloCloud Orchestrator zero-day9월 23일 21:29
• SecurityWeekAdobe Patches Critical Flaws in Connect, AEM Forms9월 23일 20:40
• SecurityWeekArista Urges Immediate Patching of Exploited VCO Zero-Day9월 23일 17:33
• The Hacker NewsF5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers9월 23일 17:29
• The Hacker NewsChinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware9월 23일 17:29
• SecurityWeekCritical F5 BIG-IP Vulnerability Exploited as Zero-Day9월 23일 16:34
• BleepingComputerF5 patches BIG-IP APM zero-day flaw exploited in RCE attacks9월 23일 16:17
• SecurityWeekCheck Point Patches Exploited Management Server Zero-Day9월 23일 15:14
• BleepingComputerChinese hackers exploit WordPress, Zyxel flaws to steal govt data9월 23일 05:35
• The Hacker NewsCheck Point Warns of Management Server Zero-Day Exploited in Targeted Attacks9월 23일 03:29
• The Hacker NewsCritical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials9월 23일 01:41
• BleepingComputerCheck Point warns of Management Server zero-day exploited in attacks9월 23일 01:32
• BleepingComputerD-Link warns of max severity zero-day bug in DIR-822A routers9월 22일 21:48
• The Hacker NewsNew CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups9월 22일 21:29
• SecurityWeekRecent ZyXEL Switch Vulnerability Exploited by Chinese Hackers9월 22일 20:55
• BleepingComputerCISA orders feds to patch Zyxel flaw exploited for data theft9월 22일 17:53
• The Hacker NewsZyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access9월 22일 14:31
• BleepingComputerCISA alerts of active exploitation of three Linux kernel flaws9월 22일 05:12