Two Citrix NetScaler Zero-Days, One Lesson: You Can’t Patch What You Can’t See
On 26 September 2026, the security research firm watchTowr warned that two unpatched remote code execution (RCE) vulnerabilities in Citrix NetScaler were being exploited in the wild. At that point the





