Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)

T2Critical 100Covered by 1 source · first reported by Help Net Security at 28 Sept, 09:51 UTC

Citrix has patched eight critical and high-severity vulnerabilities in NetScaler ADC and NetScaler Gateway, two of which (CVE-2026-88771, CVE-2026-88772) have been exploited in zero-day attacks to plant webshells on compromised devices. Rumors about their existence and active exploitation popped up…

security

Sources

• T2Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)Help Net Security28 Sept, 09:51

Vulnerabilities

• CVE-2026-88771
• CVE-2026-88772