Critical vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway products

Cyber.Au • September 28, 2026

Here are some possible reasons why your information cannot be processed, and some tips on how to solve the issue:

A high volume of simultaneous submissions from your network have been made to this website and the security tools used to protect this website have interpreted this as a possible attack on the site. Wait a few minutes then try again.

Wait a few minutes then try again.

If you continue to experience problems, please the site owner. Reference Number: 18.2d434e68.1790568699.257e92b7

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Zero-Day Vulnerabilities in Citrix NetScaler Disclosed On September 27, 2026, two critical vulnerabilities, CVE-2026-88771 and CVE-2026-88772, were published affecting Citrix NetScaler ADC and Gateway products. These vulnerabilities are currently under active exploitation, as confirmed by CISA, which added them to its Known Exploited Vulnerabilities (KEV) catalog on the same day. The vulnerabilities allow attackers to execute arbitrary code, potentially compromising sensitive data and systems. Organizations using affected versions of Citrix NetScaler are at risk, with urgent recommendations to apply patches or mitigate exposure. The vulnerabilities are linked to automated or suspicious activity patterns that may indicate exploitation attempts. Citrix has not yet released specific details on the affected versions but has acknowledged the severity of the situation. Security teams are advised to monitor their systems closely for any signs of exploitation. 2 sources 75

Extracted Entities

Platforms (2)

Citrix NetScaler ADC Citrix NetScaler Gateway