Critical 9.5
CVE-2026-88771
Active Zero-Day Exploitation of Citrix NetScaler ADC and Gateway Vulnerabilities
Vendor / product: Citrix NetScaler ADC and NetScaler Gateway
Event date: 2026-09-27
Public PoC: Yes
First tracked by RiskWire: 2026-09-28
Sources & citations (13)
- CISA orders feds to patch exploited Citrix flaws by Wednesday bleepingcomputer.com · 2026-09-28
- Citrix Confirms NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attack cybersecuritynews.com · 2026-09-27
- Certainties in life: Death, taxes, and critical Citrix vulns under attack theregister.com · 2026-09-28
- Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug securityweek.com · 2026-09-28
- Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway cisa.gov · 2026-09-27
- Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day securityaffairs.com · 2026-09-27
- Citrix confirms exploitation of Netscaler zero-day bugs itnews.com.au · 2026-09-28
- Citrix NetScaler Zero-Day RCE vulnerabilities: FAQ tenable.com · 2026-09-27
- Citrix confirms two NetScaler RCE zero-days exploited in attacks bleepingcomputer.com · 2026-09-27
- Citrix Confirms NetScaler Zero-Day RCE Flaws Actively Exploited in Attacks gbhackers.com · 2026-09-28
- New vulnerabilities in Citrix Netscaler allow for code execution de.headtopics.com · 2026-09-28
- Security researchers warn: New zero-day exploits in Citrix Netscaler? heise.de · 2026-09-27
- From Patch Tuesday to KEV in Three Weeks: The CVE-2026-19490 NetScaler Timeline dev.to · 2026-09-27
References
See CVE-2026-88771 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →