Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

Citrix disclosed two critical NetScaler zero-day vulnerabilities (CVE-2026-88771 and CVE-2026-88772) with CVSS scores of 9.5 that enable remote code execution and DDoS via a memory overflow. Multiple sources observed exploitation in the wild beginning days earlier, many NetScaler instances are exposed (Palo Alto Networks found >50,000), and customers were urged to apply patches or disable appliances while communication around the incidents and warnings was inconsistent.