Critical Citrix NetScaler Vulnerabilities Actively Exploited

Citrix has confirmed that two critical remote code execution (RCE) vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in its NetScaler ADC and NetScaler Gateway products are being actively exploited. These zero-day flaws allow unauthenticated attackers to execute arbitrary commands or cause denial-of-service. Citrix has released fixes, urging users to apply them immediately to mitigate the ongoing threat.