Citrix is a privately owned company headquartered in the US. Founded in 1989, it employs approximately 10,240 people. The company specializes in software development, functioning as a multinational cloud computing and virtualization technology provider. It delivers server, application and desktop virtualization, networking, software as a service (SaaS), and cloud computing technologies.
Citrix issued a critical security warning on October 9, 2026, for NetScaler ADC and NetScaler Gateway instances, detailing a memory overflow vulnerability enabling denial of service or remote code execution. This marks the third consecutive week the company has issued such warnings. Earlier on October 9, Citrix urged immediate patching for a critical-severity NetScaler vulnerability, tracked as CVE-2026-107406 with a CVSS score of 9.5, describing the flaw as a memory overflow that could lead to remote code execution (RCE) or denial-of-service (DoS). Previously, on October 8, hackers actively exploited CVE-2026-88771, a critical Citrix NetScaler vulnerability, to run commands, install web shells, and collect appliance configuration data, utilizing malicious scripts designed for persistent access and data exfiltration. This activity followed Citrix's confirmation on September 27 of active exploitation of two critical vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in NetScaler ADC and NetScaler Gateway, both of which enable remote code execution. An alert on October 8 highlighted these actively exploited NetScaler flaws.
Citrix's customers primarily consist of broadcast Media Production and Distribution, software Development and international Trade and Development companies. Examples of Citrix's customers include Services Sound and Vision Corporation, TFO Canada and Autodesk.