US, UK warn of exploited Citrix NetScaler zero-day bugs

Multiple zero-day vulnerabilities in Citrix NetScaler ADC/Gateway devices were disclosed and patched after evidence showed active exploitation of at least two high-severity CVEs (CVE-2026-88771 and CVE-2026-88772). Governments and CISA issued urgent advisories and required federal agencies to patch and conduct forensic triage due to global exploitation, while vendors and security firms provided detection and mitigation guidance.