CRITICAL ALERT: Critical vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway products

The Australian Cyber Security Centre (ASD’s ACSC) warns Australian organisations using Citrix NetScaler ADC and NetScaler Gateway of eight released vulnerabilities; notably CVE-2026-88771 (unauthenticated remote code execution affecting all configurations) and CVE-2026-88772 have been actively exploited globally prior to patches. ACSC recommends reviewing vendor advisories, applying security updates, checking device preconditions and logs for suspicious activity, and contacting ASD for assistance.