Citrix NetScaler and FortiMail zero-day vulnerabilities exploited
Start here
Citrix fixed the high-severity NetScaler ADC and Gateway vulnerability CVE-2026-88779 (CVSS 8.7), which has been exploited in targeted 0-day attacks; exploitation requires the device to be configured as a SAML SP or IdP. CISA warned that the critical Fortinet FortiMail vulnerability CVE-2026-104286 (CVSS 9.8) is being actively exploited, and unauthenticated attackers can write arbitrary files by crafting HTTP/HTTPS requests.
Generated by AI from reports · Updated 4 days ago
Progress timeline
- The Hacker NewsWeekly security recap: NetScaler and FortiMail 0-days, AI coding leaks, Spectre v2, and ransomware arrests
Citrix fixed the high-severity NetScaler ADC and Gateway vulnerability CVE-2026-88779 (CVSS 8.7), which has been exploited in targeted 0-day attacks; exploitation requires the device to be configured as a SAML SP or IdP. CISA warned that the critical Fortinet FortiMail vulnerability CVE-2026-104286 (CVSS 9.8) is being actively exploited, and unauthenticated attackers can write arbitrary files by crafting HTTP/HTTPS requests. A new Spectre v2 variant, Branch Target Reuse (BTR), can recover root password hashes from Intel machines running Linux within minutes.
Related discussion
Attention trend
New sources per day
- Oct 5New1 sources (1 outlets,0 accounts)
- Oct 6New0 sources (0 outlets,0 accounts)
- Oct 7New0 sources (0 outlets,0 accounts)
- Oct 8New0 sources (0 outlets,0 accounts)
- Oct 9New0 sources (0 outlets,0 accounts)
- Oct 10New0 sources (0 outlets,0 accounts)
- Oct 11New0 sources (0 outlets,0 accounts)
- Oct 12New0 sources (0 outlets,0 accounts)
- Oct 13New0 sources (0 outlets,0 accounts)