#NetScaler

Critical PHP2Shell flaws threaten NetScaler. Vendor recommends securing administrative access immediately

NetScaler confirmed its appliances are affected by two critical PHP vulnerabilities: CVE-2026-109618 and CVE-2026-109619. The flaws may enable unauthenticated remote code execution. Patches are scheduled for 27 October 2026.