Standard
Datagram Transport Layer Security, an IETF protocol that adapts TLS to run over UDP, securing VPN, VoIP and WebRTC traffic.
Citrix shipped one NetScaler ADC and Gateway release that fixes eight flaws, two of them rated CVSS v4 9.5 and already exploited. Teams running their own appliances on older 13.1 or 14.1 builds should treat the upgrade as an emergency change.
Reality
Citrix shipped fixes on September 27 for NetScaler flaws CVE-2026-88771 and CVE-2026-88772, both rated 9.5 and exploited on unpatched appliances. Exploitation began before the fix, at a date Citrix has not given, so affected appliances need an intrusion check as well as an upgrade.
Reality
Citrix fixed CVE-2026-88772, a pre-auth DTLS memory overflow in NetScaler exploited as a zero-day and one of two exploited flaws in Sunday's advisory. The vulnerable handshake runs before authentication, so an internet-facing appliance answers a crafted packet with no login.
Reality
OpenSSL patched 14 flaws, led by CVE-2026-84782, a CVSS 8.2 DTLS handshake bug that lets an unauthenticated remote peer pull fragments of heap memory. Only software that speaks DTLS is exposed, so VPN, VoIP and IoT products go first in the patch queue.
Perspective Coverage
4 publishersReality
aiortc 1.5 removed certificates= from RTCConfiguration. The obvious repair, assigning _certificates after construction, is a silent no-op that a loopback echo test cannot see.
Reality