Citrix NetScaler ADC and Gateway Zero-day Vulnerabilities Exploited in Attacks (CVE-2026-88771 & CVE-2026-88772)

Reported by Qualys (Diksha Ojha)

Summary by Cyber Security News28 Sep 2026, 17:21 CEST

About this summary. This is a short, independently written summary of an article first published by Qualys. Cyber Security News did not report or verify the underlying story. Read the original: https://threatprotect.qualys.com/2026/09/28/citrix-netscaler-adc-and-gateway-zero-day-vulnerabilities-exploited-in-attacks-cve-2026-88771-cve-2026-88772/

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered agencies to secure their systems against two critical Citrix NetScaler vulnerabilities that have been exploited in attacks. CISA added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities Catalog. CISA urged users to patch the vulnerabilities before September 30, 2026.

Read the full article at Qualys →

Source attribution: headline and facts are from Qualys (threatprotect.qualys.com). Summary method: excerpt of the source description. See our source attribution policy.