Two Citrix NetScaler Zero-Days Exploited Globally
Citrix has patched eight vulnerabilities in NetScaler ADC and NetScaler Gateway, including CVE-2026-88771 and CVE-2026-88772, both with a CVSS score of 9.5 and already exploited as
Citrix NetScaler zero-day exploited to gain root access
Mandiant and Google Threat Intelligence Group have documented the active exploitation of CVE-2026-88772, a pre-authentication vulnerability with a CVSS score of 9.5 affecting Citri

