Citrix NetScaler Zero-Days FAQ: CVE-2026-88771 & 88772
Citrix issued emergency patches for eight NetScaler flaws, including zero-days CVE-2026-88771 and CVE-2026-88772.
Citrix released emergency security updates for eight vulnerabilities affecting customer-managed NetScaler ADC and NetScaler Gateway appliances. Two are identified as critical zero-days: CVE-2026-88771 and CVE-2026-88772. The SOCRadar FAQ addresses those flaws and the available patches. The published excerpt does not state that exploitation has been observed.
- Emergency updates cover eight NetScaler ADC and Gateway flaws.
- CVE-2026-88771 and CVE-2026-88772 are described as critical zero-days.
- The affected appliances are customer-managed, not Citrix-hosted.
- CVEs
- CVE-2026-88771
- Vendors
- Citrix
- Products
- NetScaler ADCNetScaler Gateway
- Organizations
- Citrix
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-88771 | Unauthenticated RCE in Citrix NetScaler ADC and Gateway | 9.5 | 82% | KEVPoC ×5 | KEV |
From the original article

Citrix NetScaler Zero-Days FAQ: CVE-2026-88771 & 88772 Citrix has released emergency security updates for eight vulnerabilities affecting customer-managed NetScaler ADC and NetScaler Gateway appliances, including two cri
By ameer · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.