Citrix NetScaler zero-days exploited globally and new high-severity vulnerability

Citrix has released updates for several critical and high-severity vulnerabilities affecting NetScaler ADC and Gateway, platforms frequently exposed to the Internet for remote application access. According to Help Net Security's summary, the RCE vulnerabilities CVE-2026-88771 and CVE-2026-88772 had reportedly been exploited globally for weeks before fixes became available. Italy's ACN also reported CVE-2026-88779, classified as high severity and fixed in updates for the same products. The combination of active exploitation, external accessibility, and NetScaler's role as an enterprise gateway makes the risk particularly high. Organizations should immediately install the patched versions, check for indicators of compromise, and not assume that applying the patch is sufficient to rule out prior intrusions.

Source: ACN — CSIRT Italy