Warnings and recommendations from national cyber security agencies, newest first. Each brief is at most 120 words, bottom line first, and links to the publication it was written from.
NSM (NO) · Warning ·
Sikkerhetsoppdatering tilgjengelig for Citrix Netscaler
Citrix Netscaler users must update due to exploited vulnerability.
Citrix has confirmed exploitation of a zero-day vulnerability in Citrix Netscaler. The vulnerability affects NetScaler ADC and NetScaler Gateway versions 14.1 before 14.1-73.41 and 13.1 before 13.1-64.28. An attacker can potentially run arbitrary code on the device. The vulnerability has been assigned CVE-2026-88779.
Recommended by the publisher: NSM recommends updating vulnerable devices as soon as possible and conducting thorough investigations on Citrix Netscaler instances.
Ny sårbarhet i Citrix Netscaler observert aktivt utnyttet
Citrix Netscaler vulnerability is being actively exploited.
Citrix Netscaler AAA virtual server and Citrix Netscaler Gateway using SAML-authentication are affected. The vulnerability allows arbitrary code execution without authentication. NSM assesses that all versions are likely affected. A security update is now available.
Recommended by the publisher: NSM recommends taking affected devices offline and updating them as soon as possible.
Fortinet has reported a critical vulnerability, CVE-2026-104286, affecting FortiMail management interface. CISA has added it to the KEV catalog. The vulnerability affects FortiMail versions 8.0.0 to 8.0.1, 7.6.0 to 7.6.6, 7.4.0 to 7.4.8, and 7.2.0 to 7.2.9.
Recommended by the publisher: CERT-SE recommends applying mitigating measures and searching for abnormal behavior.
gotop software has argument injection vulnerability.
CVE-2026-91784 affects gotop version 3.0.0. A local attacker can terminate processes owned by a targeted user. The product is no longer supported and the vulnerability has not been fixed. CERT Polska has confirmed the vulnerability at version 3.0.0.
Recommended by the publisher: No recommendation is given.
Antar du vår utmaning? / Do you accept our challenge?
CERT-SE presents a CTF challenge for cyber security month.
CERT-SE has put together a CTF during the cyber security month. The challenge is open to anyone with an interest in IT security. A network dump contains six flags to be found.
Version 1.1: Citrix NetScaler - Systeme werden über ZeroDay-Schwachstellen angegriffen
Citrix NetScaler systems are under attack via ZeroDay vulnerabilities.
The BSI reports active exploitation of two ZeroDay vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in Citrix NetScaler ADC and NetScaler Gateway. These vulnerabilities allow remote code execution without authentication. The CVSS score is 9.5.
Recommended by the publisher: The BSI recommends updating affected systems.
SAMSIK notes Danish companies and citizens are exposed to cyber attacks daily. The Cyber Security Month aims to increase awareness of digital threats. Various activities will be held across Denmark.
Quick.Cart software has a Cross-Site Request Forgery vulnerability.
CERT Polska has received a report about vulnerability CVE-2026-41875 in Quick.Cart software. The vulnerability allows an attacker to change admin's login and password. All versions through 6.7.0 are vulnerable. This issue was fixed in a patch to version 6.7.
Recommended by the publisher: Deploy the patch to version 6.7 to fix the issue.
Vulnerability in MyPresta Google Merchant Center Feed software
MyPresta Google Merchant Center Feed has vulnerability.
MyPresta Google Merchant Center Feed versions 1.9.1 through 2.3.8 are vulnerable to unauthenticated arbitrary file write. An attacker can execute arbitrary PHP code. This issue was fixed in version 2.3.9.
Recommended by the publisher: Update to version 2.3.9.
CVE-2026-19547 affects Ghostscript for Windows before version 10.08.0. An attacker can escalate privileges through PostScript resource file hijacking. The vulnerability allows arbitrary code execution with Ghostscript process privileges. This issue was fixed in version 10.08.0.
Recommended by the publisher: CERT Polska recommends updating to version 10.08.0.
Das U-Boot versions from 2009.08 through 2026.07 are vulnerable to out-of-bounds write. An attacker can execute arbitrary code by sending duplicated last-fragment IP packets. The issue was fixed in release version 2026.07.
Recommended by the publisher: Update to release version 2026.07.
Dayforce ESS Excelity has SQL injection and XSS vulnerabilities.
Dayforce ESS Excelity versions before V3 and V4 have SQL injection, XSS, and Path Traversal vulnerabilities. An attacker can execute arbitrary SQL queries, JavaScript, or access local files. CERT Polska has received a report about these vulnerabilities.
Recommended by the publisher: Update to version V3 or V4.
Kaon AR2140 routers are vulnerable to authentication bypass.
CVE-2026-52748 and CVE-2026-52749 affect Kaon AR2140 routers through version 4.2.17. An attacker can access the backup functionality and retrieve configuration data. The attacker can also bypass authentication and perform unauthorized actions. CERT Polska has received a report about these vulnerabilities.
Recommended by the publisher: CERT Polska recommends checking the status of newer firmware versions.
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
NCSC urges UK organisations to mitigate Citrix NetScaler vulnerabilities.
Citrix NetScaler ADC and Gateway are affected by eight vulnerabilities, two of which are being actively exploited. CVE-2026-88771 and CVE-2026-88772 allow remote code execution. Organisations using Citrix NetScaler ADC or Gateway on premises are affected.
Recommended by the publisher: The NCSC recommends following vendor best practice advice to mitigate vulnerabilities. The NCSC urges network defenders to read the Citrix security bulletin and install the latest available updates.
Vulnerabilities in F&F Filipowski mH-DEVELOPER devices
F&F Filipowski mH-DEVELOPER devices are vulnerable.
F&F Filipowski mH-DEVELOPER devices before version 3.0.30 are affected. An attacker can gain a root shell, intercept credentials, or cause a denial of service. CERT Polska has coordinated the disclosure of these vulnerabilities.
Recommended by the publisher: CERT Polska recommends updating to version 3.0.30.
Aktivt utnyttelse av kritiske sårbarheter i Citrix Netscaler
NSM warns of active exploitation of Citrix Netscaler vulnerabilities.
Citrix has confirmed exploitation of CVE-2026-88771 and CVE-2026-88772, which affect Citrix Netscaler ADC and Gateway. These vulnerabilities can allow an unauthenticated attacker to run arbitrary code. The vulnerabilities affect versions 14.1 before 14.1-73.37 and 13.1 before 13.1-64.23.
Recommended by the publisher: NSM recommends updating vulnerable devices as soon as possible.
2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
Citrix NetScaler ADC and Gateway have critical vulnerabilities, says CERT-EU.
Citrix NetScaler ADC and Gateway versions 13.1 before 13.1-64.23 and 14.1 before 14.1-73.37 are affected by 8 vulnerabilities, including 2 critical unauthenticated Remote Code Execution vulnerabilities that Citrix has confirmed are exploited in the wild. The vulnerabilities affect customer-managed deployments. CERT-EU assesses that updating affected software is necessary.
Recommended by the publisher: CERT-EU recommends updating affected software and running a compromise assessment on those exposed on the internet.
BM26-002 Kritiska sårbarheter i Citrix NetScaler ADC och Citrix NetScaler Gateway
Citrix NetScaler ADC and Gateway have critical vulnerabilities.
Citrix NetScaler ADC and Gateway versions 14.1 before 14.1-73.37 and 13.1 before 13.1-64.23 are affected. Two vulnerabilities, CVE-2026-88771 and CVE-2026-88772, have a CVSS score of 9.5, allowing unauthenticated remote code execution. CISA has added these to the Known Exploited Vulnerabilities catalog.
Recommended by the publisher: CERT-SE recommends updating systems and inspecting for signs of intrusion.
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
CISA alerts on critical vulnerabilities in Citrix NetScaler ADC, Gateway.
CISA has updated its Alert to provide a SIGMA detection rule resource to help identify potentially suspicious activity. CISA is amplifying Citrix’s disclosure of eight new vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway products. CISA has received reports confirming that threat actors are actively exploiting these vulnerabilities globally.
Recommended by the publisher: CISA urges users and administrators to review Citrix’s advisories and patch.