ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ on X: "Citrix confirmed two new NetScaler zero-days, CVE

X • September 27, 2026

ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ on X: "Citrix confirmed two new NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, both CVSS 9.5 and exploited before patches were available.

Citrix confirmed two new NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, both CVSS 9.5 and exploited before patches were available.

Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day

Citrix confirmed two new NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, both CVSS 9.5 and exploited before patches were available.

Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day

That means the window was open while customers were still waiting for the fix

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Zero-Day Vulnerabilities in Citrix NetScaler Under Active Exploitation On September 26, 2026, security firm watchTowr reported two unpatched zero-day vulnerabilities in Citrix NetScaler ADC and Gateway appliances, allowing remote code execution (RCE) and actively exploited in the wild. Citrix has confirmed the existence of these vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, with severity scores of 9.5. The vulnerabilities were discovered during forensic investigations, indicating they were exploited before any patch was available. Administrators were advised to shut down their NetScaler appliances as a precaution. Citrix has since released a security bulletin detailing these flaws and provided patches on September 27, 2026. The vulnerabilities affect all NetScaler ADC and Gateway deployments, including those with default configurations. Organizations using these systems are urged to apply the updates immediately to mitigate the risk of exploitation. 39 sources 81

Extracted Entities

ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ on X: "Citrix confirmed two new NetScaler zero-days, CVE

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)

Platforms (1)