CISA Issues Urgent Alert on Actively Exploited Citrix NetScaler Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent alert regarding two critical vulnerabilities (CVE-2026-88771 and CVE-2026-88772) in Citrix NetScaler ADC and NetScaler Gateway, which are being actively exploited globally. CISA has ordered federal agencies to patch these flaws by September 30, 2026, due to the potential for unauthenticated remote code execution.