Warnings and recommendations from national cyber security agencies, newest first. Each brief is at most 120 words, bottom line first, and links to the publication it was written from.
NSM (NO) · Warning ·
Oppdatert varsel: To kritiske sårbarheter i PHP
PHP versions 5 to 8 are vulnerable to code execution.
PHP versions 5, 6, 7 and 8 are affected by two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, allowing an unauthenticated actor to execute arbitrary code. Technical details are not available yet. PHP will release a patch on October 21. Versions older than 8.2 will not receive security updates.
Recommended by the publisher: NSM recommends installing security updates as soon as they are available.
Microsoft has published its monthly security updates. NSM has no specific vulnerabilities to highlight. The updates are available on Microsoft's website.
Recommended by the publisher: NSM recommends system owners to update their software to the latest version as soon as possible.
Sikkerhetsoppdatering tilgjengelig for Citrix Netscaler
Citrix Netscaler users must update due to exploited vulnerability.
Citrix has confirmed exploitation of a zero-day vulnerability in Citrix Netscaler. The vulnerability affects NetScaler ADC and NetScaler Gateway versions 14.1 before 14.1-73.41 and 13.1 before 13.1-64.28. An attacker can potentially run arbitrary code on the device. The vulnerability has been assigned CVE-2026-88779.
Recommended by the publisher: NSM recommends updating vulnerable devices as soon as possible and conducting thorough investigations on Citrix Netscaler instances.
Ny sårbarhet i Citrix Netscaler observert aktivt utnyttet
Citrix Netscaler vulnerability is being actively exploited.
Citrix Netscaler AAA virtual server and Citrix Netscaler Gateway using SAML-authentication are affected. The vulnerability allows arbitrary code execution without authentication. NSM assesses that all versions are likely affected. A security update is now available.
Recommended by the publisher: NSM recommends taking affected devices offline and updating them as soon as possible.
Aktivt utnyttelse av kritiske sårbarheter i Citrix Netscaler
NSM warns of active exploitation of Citrix Netscaler vulnerabilities.
Citrix has confirmed exploitation of CVE-2026-88771 and CVE-2026-88772, which affect Citrix Netscaler ADC and Gateway. These vulnerabilities can allow an unauthenticated attacker to run arbitrary code. The vulnerabilities affect versions 14.1 before 14.1-73.37 and 13.1 before 13.1-64.23.
Recommended by the publisher: NSM recommends updating vulnerable devices as soon as possible.
Microsoft has released its monthly security updates. NSM has no specific vulnerabilities to highlight. The updates are available on Microsoft's website.
Recommended by the publisher: NSM recommends system owners to update their software to the latest version as soon as possible.
Citrix NetScaler ADC and NetScaler Gateway have vulnerabilities CVE-2026-19490 and CVE-2026-19489. NSM expects exploitation. CVE-2026-19490 allows bypassing authentication. CVE-2026-19489 is a buffer overflow vulnerability.
Recommended by the publisher: NSM recommends updating vulnerable devices as soon as possible.