🔴 Critical: CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical Citrix NetScaler ADC and Gateway vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing reports of active exploitation in the wild. The update came on Sunday, signaling that attackers are already targeting these flaws globally.
The two vulnerabilities are:
- CVE-2026-88771 (CVSS score: 9.5) – an improper input validation issue that could allow an unauthenticated attacker to compromise affected systems.
CISA's KEV catalog is used to flag vulnerabilities that are being actively exploited, and federal agencies are typically required to remediate listed flaws within a set timeframe. The addition of these NetScaler issues underscores the urgency for organizations running the affected products to patch immediately or apply mitigations.
Given the severity of the flaws and confirmed exploitation, defenders should prioritize reviewing their Citrix NetScaler ADC and Gateway deployments and ensure they are running supported, up-to-date versions.
Source: The Hacker News
Is your organization running Citrix NetScaler ADC or Gateway, and if so, how are you handling the patching?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login