By David Hollingworth
Publication Date: 2026-09-28 00:29:00
Cloud computing firm Citrix’s Cyber Threat Intelligence Team issued a security update overnight disclosing eight vulnerabilities in its NetScaler ADC and NetScaler Gateway products, and government cyber agencies wasted no time in amplifying the warning.
“Citrix has released updates for NetScaler ADC and NetScaler Gateway to address multiple security vulnerabilities,” the company said in a September 28 advisory.
You’re out of free articles for this month
“These vulnerabilities vary by deployment configuration and enabled features, and include issues that could allow remote code execution, denial of service, HTTP request smuggling, policy bypass, and TCP initial sequence number prediction under specific conditions.”
Unfortunately, two of them – CVE-2026-88771 and CVE-2026-88772 – are already drawing the wrong sort of attention, with Citrix observing exploitation on “unmitigated NetScaler deployments”.
“Citrix strongly urges affected…
