US, UK warn of exploited Citrix NetScaler zero-day bugs
Agencies warn exploited Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 require immediate patching and forensic triage.
US, UK, and Dutch agencies warned that Citrix NetScaler ADC and Gateway zero-days are under active exploitation. Citrix confirmed eight new vulnerabilities; CVE-2026-88771 and CVE-2026-88772, both scored 9.5, have been exploited, and patches are available. CISA ordered US federal agencies to patch the two exploited bugs by Wednesday and to perform forensic triage, citing intelligence of global exploitation. watchTowr said CVE-2026-88771 was exploited before a fix existed and released a susceptibility-check tool.
- Eight new NetScaler bugs; CVE-2026-88771 and CVE-2026-88772 are exploited and scored 9.5.
- CISA set a Wednesday federal patch deadline and mandated forensic triage.
- Citrix, CISA, and UK and Dutch agencies issued weekend warnings.
- watchTowr says CVE-2026-88771 was hit before a patch and shipped a check tool.
- NetScaler appliances are widely deployed enterprise VPN and traffic gateways.
- Vendors
- Citrix
- Products
- NetScaler ADCNetScaler Gateway
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-88771+1 related CVE | Unauthenticated RCE in Citrix NetScaler ADC and Gateway | 9.5 | 82% | KEVPoC ×5 | KEV |
From the original article
2 min read at therecord.mediaIncident responders began warning of potential vulnerabilities in NetScaler Gateway products on Saturday before cybersecurity agencies in the Netherlands, U. S. and U.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.