Under Fire: Attackers Target Flaws in F5 and Citrix Gear

F5 Revises Severity of Flaw Disclosed Last Year Mathew J. Schwartz (euroinfosec) • March 30, 2026

Flaws in major application delivery and security platforms and VPN gateways are being actively exploited or targeted by attackers.

See Also: Experts Offer Insights from Theoretical to the Realities of AI-enabled Cybercrime

Appliances under fire include F5 devices - a vulnerability in the BIG-IP Access Policy Manager can be remotely exploited to execute code, the vendor warned.

Separately, researchers said attackers have begun targeting a "memory overread" flaw in NetScaler - formerly known as Citrix - Application Delivery Controller, which the vendor found and first detailed to customers on March 23.

F5 Appliances Under Fire

Seattle-based F5's multi-cloud security and application delivery platform is widely used, including by many large organizations and continues to ...