Warning: Citrix NetScaler ADC & NetScaler Gateway RCE Vulnerabilities Actively Exploited as Zero-Days, Patch Immediately!

Citrix NetScaler ADC and Gateway have two critical remote code execution vulnerabilities (CVE-2026-88771 and CVE-2026-88772, both rated CVSS 9.5) that are being actively exploited in the wild; CVE-2026-88771 allows unauthenticated arbitrary command execution via improper input validation, while CVE-2026-88772 is a DTLS-enabled memory overflow enabling RCE or DoS. The advisory warns of observed in-memory payloads, access to VPN/AAA session material and persistence, notes a public proof-of-concept for CVE-2026-88772, and recommends urgent patching, forensic preservation before remediation where compromise is suspected, and increased monitoring and access restriction for management interfaces.