CISA Alerts Organizations to Active Exploitation of Citrix NetScaler Zero-Day Flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert concerning two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, actively exploited in Citrix NetScaler ADC and Gateway products worldwide. These flaws allow remote code execution, with one affecting default configurations. Organizations are urged to apply patches immediately and perform forensic analysis to mitigate significant security risks.