CISA Warns of Actively Exploited Citrix NetScaler Zero-Day Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has added two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting Citrix NetScaler ADC and Gateway products, to its KEV Catalog. These flaws allow remote code execution and are currently being actively exploited globally. CISA urges organizations to prioritize remediation immediately due to the high risk of widespread exploitation and potential impact on critical infrastructure.