<![CDATA[🔴 Critical: CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally]]>

<![CDATA[🔴 Critical: CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally]]>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical Citrix NetScaler ADC and Gateway vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing reports of active exploitation in the wild. The update came on Sunday, signaling that attackers are already targeting these flaws globally.

The two vulnerabilities are:

CVE-2026-88771 (CVSS score: 9.5) – an improper input validation issue that could allow an unauthenticated attacker to compromise affected systems.

CISA's KEV catalog is used to flag vulnerabilities that are being actively exploited, and federal agencies are typically required to remediate listed flaws within a set timeframe. The addition of these NetScaler issues underscores the urgency for organizations running the affected products to patch immediately or apply mitigations.

Given the severity of the flaws and confirmed exploitation, defenders should prioritize reviewing their Citrix NetScaler ADC and Gateway deployments and ensure they are running supported, up-to-date versions.

Source: The Hacker News

Is your organization running Citrix NetScaler ADC or Gateway, and if so, how are you handling the patching?

]]>https://xploitlk.com/topic/493/critical-cisa-says-attackers-are-exploiting-two-critical-citrix-netscaler-flaws-globallyRSS for NodeTue, 27 Oct 2026 10:38:20 GMTMon, 28 Sep 2026 12:30:23 GMT60