Citrix patches two actively exploited NetScaler zero-days enabling unauthenticated remote code execution
Citrix confirmed two critical NetScaler ADC and Gateway zero-days, CVE-2026-88771 and CVE-2026-88772, were exploited in the wild for unauthenticated remote code execution before patches shipped.
- Victim
- Citrix NetScaler