THREATNOIR
Subscribe
Back to advisories

Citrix confirms two NetScaler RCE zero-days exploited in attacks

Citrix NetScaler ADC and Gateway appliances are under active attack via two unpatched RCE zero-days (CVE-2026-88771 and CVE-2026-88772). Unauthenticated attackers can execute arbitrary commands or trigger denial-of-service on vulnerable instances. Any organization running these appliances without the latest security updates is at immediate risk of compromise.

CRITICALAdvisorySep 28, 2026
Action required
Identify all NetScaler ADC and Gateway appliances in your environment and apply Citrix security updates immediately. If patching cannot be completed within 24 hours, isolate affected appliances or implement network-level access controls to restrict traffic to these devices.
Affected products
NetScaler ADCNetScaler GatewayCitrix
CVE IDs
CVE-2026-88771CVE-2026-88772
Linked articles
Source links