NetScaler Admins Told to Patch Critical Zero-Days in ADC and Gateway Now

NetScaler admins told to patch critical zero-days in ADC and Gateway now

Citrix NetScaler ADC and NetScaler Gateway users should take their systems offline and patch them immediately, they were told over the weekend, as news emerged of two critical unauthenticated remote code execution zero-day vulnerabilities in the products under active attack. “Monday will be too late,” watchtower CEO Benjamin Harris wrote in a LinkedIn post on Sunday. Citrix subsequently confirmed the two remotely exploitable vulnerabilities were…

Certainties in life: Death, taxes, and critical Citrix vulns under attack

Sunday NetScaler patch dump fixes trio of critical vulns and five more serious messes

Citrix confirms two exploited NetScaler zero-days

Citrix has confirmed active exploitation of two critical NetScaler RCE flaws, CVE-2026-88771 and CVE-2026-88772, both rated 9.5, and released fixes in CTX697096. Affected products include NetScaler ADC and Gateway, with DTLS-dependent exposure noted...

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)

Citrix has patched two vulnerabilities (CVE-2026-88771, CVE-2026-88772) that been exploited in zero-day attacks to plant webshells.