Citrix Confirms NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attack

Citrix has released emergency security updates for NetScaler ADC and NetScaler Gateway after confirming that attackers are exploiting two critical remote code execution vulnerabilities against unmitigated appliances. The flaws, CVE-2026-88771 and CVE-2026-88772, each carry a CVSS v4.0 score of 9.5 and can let remote, unauthenticated adversaries execute code, placing internet-facing gateways at immediate risk. Because these appliances operate at the network edge and manage trusted traffic, a successful exploitation can create a strong foothold for lateral movement and credential theft. The confirmation validates warnings covered yesterday by Cyber Security News, when watchTowr reported two previously undisclosed NetScaler RCE...

Read the full article at the source.