Citrix NetScaler Hit by Two Critical RCE Flaws Already Under Attack
ID: 3090ba7f-49c6-5918-9b74-2d51102a2c5a
STIX ID: report--3090ba7f-49c6-5918-9b74-2d51102a2c5a
Feed Name: The Cyber Express
Threat Score
Citrix released updates addressing two critical NetScaler ADC/Gateway remote code execution vulnerabilities (CVE-2026-88771 and CVE-2026-88772, both CVSS 9.5) that have been observed exploited in the wild; one affects all default deployments and the other impacts appliances with DTLS enabled (on by default for VPNs). The bulletin lists affected and fixed builds, six additional non-exploited flaws, provides no workarounds or IOCs, and urges customers to install the patched NetScaler releases immediately.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.