Critical Zero-Day Vulnerabilities in Citrix NetScaler Disclosed

• •Two critical vulnerabilities in Citrix NetScaler (CVE-2026-88771, CVE-2026-88772) are actively exploited.
• •CISA added these vulnerabilities to its KEV catalog on September 27, 2026.
• •Organizations are urged to apply patches immediately to mitigate risks.

On September 27, 2026, two critical vulnerabilities, CVE-2026-88771 and CVE-2026-88772, were published affecting Citrix NetScaler ADC and Gateway products. These vulnerabilities are currently under active exploitation, as confirmed by CISA, which added them to its Known Exploited Vulnerabilities (KEV) catalog on the same day. The vulnerabilities allow attackers to execute arbitrary code, potentially compromising sensitive data and systems. Organizations using affected versions of Citrix NetScaler are at risk, with urgent recommendations to apply patches or mitigate exposure. The vulnerabilities are linked to automated or suspicious activity patterns that may indicate exploitation attempts. Citrix has not yet released specific details on the affected versions but has acknowledged the severity of the situation. Security teams are advised to monitor their systems closely for any signs of exploitation.