Citrix NetScaler Zero-Days FAQ: CVE-2026-88771 & 88772

Citrix released emergency updates for eight NetScaler ADC/Gateway vulnerabilities and confirmed two critical zero-day RCEs (CVE-2026-88771, CVE-2026-88772) are being exploited in the wild; the advisory and CISA KEV listing (with a September 30, 2026 remediation date for covered agencies) detail affected builds, mitigation steps, IoC/compromise-assessment guidance, and forensic preservation recommendations.