Cybersecurity

Citrix NetScaler Under Attack: What to Know About Zero-Days CVE-2026-88771 and CVE-2026-88772

Two critical remote code execution flaws in Citrix NetScaler ADC and Gateway were exploited as zero-days before any patch existed. Both score 9.5 on CVSS v4.0, CISA has added them to its KEV catalog, and telemetry points to more than 50,000 potentially vulnerable internet-facing instances.