Citrix finally released Netscaler patches for PHP2Shell. Netscaler notably has no ASLR so I’d recommend patching.
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697263&articleTitle=Citrix_Security_Advisory_for_CVE_2026_109618_and_CVE_2026_109619
Kevin Beaumont
npub1lc…6lcye
2026-10-27 13:38:42 UTC
in reply to nevent1q…hvax
Author Public Key
npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcyePublished at
2026-10-27 13:38:42 UTCEvent JSON
{
"id": "194dfe71ad698ee9df9e1b0a6d4a2f4ca37e3ba11fd9dc997f35893c1a604add",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1793108322,
"kind": 1,
"tags": [
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"f749861fd095633b097f18f699ca98dc7afefa7037de02bd3227a6891bf2a53a",
"",
"reply",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"d0c6c3f1e8f141a739a32a045fb2ab9e6132f3d8c734a38d13782e5f9bcfe4d7",
"",
"root",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"proxy",
"https://cyberplace.social/@GossiTheDog/117513147042829138",
"web"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/117513147042829138",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/117513147042829138",
"pink.momostr"
],
[
"-"
]
],
"content": "Citrix finally released Netscaler patches for PHP2Shell. Netscaler notably has no ASLR so I’d recommend patching. \n\nhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697263\u0026articleTitle=Citrix_Security_Advisory_for_CVE_2026_109618_and_CVE_2026_109619",
"sig": "771d2de8489100d63c4a54bb35117c07f5794852a9f2419027aaa41ac792dfb84d9eeb2c0eefac1f470c6ac9e8387647377f6d2fc2ca572a2c72ac27638dd44c"
}