Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-20...
On September 26, 2026, security firm watchTowr reported two unpatched zero-day vulnerabilities in Citrix NetScaler ADC and Gateway appliances, allowing remote code execution (RCE) and actively exploited in the wild. Citrix has confirmed the existence of these vulnerabilities, tracked as CVE-2026-887...
In late September 2026, two critical zero-day vulnerabilities (CVE-2026-88771 and CVE-2026-88772) in Citrix NetScaler ADC and Gateway were actively exploited, allowing remote code execution. The Cybersecurity and Infrastructure Security Agency (CISA) added these CVEs to its Known Exploited Vulnerabi...
Citrix has addressed eight vulnerabilities in its NetScaler ADC and Gateway products, with three critical CVEs identified: CVE-2026-88771, CVE-2026-88772, and CVE-2026-88773. These vulnerabilities can lead to Remote Code Execution (RCE), Denial-of-Service, and HTTP Request Smuggling. CVE-2026-88771...
