NCSC Urges UK organizations to Patch for Citrix NetScaler ADC and Gateway 0-Day Vulnerabilities

The UK National Cyber Security Center (NCSC) has urged organizations to take immediate action against eight vulnerabilities affecting customer-managed Citrix NetScaler ADC and NetScaler Gateway appliances. Two critical flaws, CVE-2026-88771 and CVE-2026-88772, are already being exploited against unmitigated systems, turning routine patching into an urgent incident-response task. Citrix NetScaler 0-Day Vulnerabilities Citrix’s CTX697096 bulletin rates both exploited vulnerabilities at 9.5 under CVSS 4.0. CVE-2026-88771 is an improper input-validation flaw that enables an unauthenticated, remote attacker to execute arbitrary commands. It affects every vulnerable NetScaler deployment, including default configurations, without...

Read the full article at the source.