Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

This advisory describes actively exploited critical vulnerabilities in Citrix NetScaler (including CVE-2026-88771/88772 and related SAML/DTLS issues) that enable unauthenticated command execution and denial-of-service; it summarizes vendor and industry responses, urges immediate patching, and recommends defense-in-depth mitigations—Cloudflare Access, WAF rules, origin restrictions (Tunnel, authenticated origin pulls, token validation), and Zero Trust architectures—to prevent attackers from reaching exposed authentication surfaces.