Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

Cloudflare

20 Oct 2026 · How we pick and credit stories

Linked source · Cloudflare BlogSave

CVE-2026-88771 lets attackers run commands on NetScaler Gateway before anyone signs in. Patching takes time most teams don't have, so the sign-in decision has to move in front of the vulnerable code.

Ask the square

The story is what was announced. If it raises a question for your team, ask the people who run this technology day to day. Your post links back to this story, so the next reader finds it too.

Ask a question about this storyStart a discussionSee the Security space →

Recent threads in Security

New

Question

Which security investments are you prioritising for FY27?

Identity, cloud security posture, AI security, SOC automation, resilience? Share your top two and why.

Techarda editors Editorial26d ago Answer this#Identity#Cloud security

New

Question

How are you securing employee use of generative AI tools?

Blocking, allow-listing, DLP, enterprise licences, policy and training: what combination is working in practice?

Techarda editors Editorial26d ago Answer this#Generative AI

Something wrong or out of date? Suggest a correction. We reply within 5 business days.

More from Cloudflare

Recent updates from Cloudflare, so you can tell whether this is a one-off or part of a pattern.

All Cloudflare news →

Security

Introducing Clairic, a new System One class of extraction models

Clairic is a new model from Cloudflare that is a System One extraction modeI, capable of extracting, computing, estimating, and forecasting data from unstructured inputs.

Cloudflare·20 Oct 2026via Cloudflare Blog

Security

Continuous accountability for Verified bots

Identity alone doesn't guarantee a bot will behave responsibly. We are introducing a system to continuously evaluate whether Verified bots honor site preferences, like robots.txt and HTTP 429s, ensuring they remain accountable over time.

Cloudflare·17 Oct 2026via Cloudflare Blog

Security

A fully programmable secure web gateway

Cloudflare Gateway and Data Loss Prevention have inherited the flexibility and power of Cloudflare Workers through our full-stack integration with the Cloudflare Developer platform.

Cloudflare·16 Oct 2026via Cloudflare Blog

More in Security

What other companies in Security are doing. The category page shows who’s active, side by side.

Compare companies in Security →

Security

September 2026 Cyber Threat Landscape: Global Attacks Jump 48% as Phishing and GenAI Data Exposure Rise

Key takeaways Organizations experienced 2,803 weekly cyber attacks on average in September, up 16% month over month and 48% year over year. Education remained the most targeted sector, averaging 6,656 weekly attacks per organization, a 59% year-over-year increase. Europe recorded the sharpest regional rise at 61% year over year, while Latin America faced the highest volume at 3,813 weekly attacks…

Check Point Software·9 Oct 2026via Check Point Software Blog

Security

Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in

Why the controls on an AI agent have to live outside of it, and what a security operations team can implement and maintain those controls. The new privileged user in your environment Security teams spent two decades learning how to work with the people they trust most. Domain admins, DBAs, finance approvers and contractors with VPN access all get a mature playbook: verified identity, scoped…

Rapid7·20 Oct 2026via Rapid7 Blog

Security

Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus . A legacy API endpoint could be exploited to bypass authentication and run various functions without authentication ( CVSS: 8.6 High ). The most serious functions allow for full database read ( CVSS: 8.5 High ) and an insecure file…

Rapid7·20 Oct 2026via Rapid7 Blog

Security

Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Overview In early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments. The intrusion achieved root code execution, deployed multiple persistence mechanisms, installed PHP web shells, created outbound…

Rapid7·20 Oct 2026via Rapid7 Blog