By Guru Baran
Publication Date: 2026-10-13 15:26:00
Threat actors are actively exploiting two critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances, allowing them to execute code remotely on exposed systems.
The flaws, tracked as CVE-2026-88771 and CVE-2026-88772, received a CVSS v4 severity score of 9.5 out of 10 and have been added to the U.S. Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities catalog.
CISA confirmed that it received reports and partner intelligence showing global exploitation activity. Citrix released emergency updates after confirming that exploitation had occurred against unpatched, customer-managed NetScaler deployments. The affected products are often placed at the network edge to provide application delivery, load balancing, VPN access, and secure remote access.
That position makes a compromised appliance highly valuable to threat actors because it can sit between internet users and internal company systems.
CVE-2026-88771…
