Citrix NetScaler Zero-Day Exploitation Escalates into Mass Attacks (CVE-2026-88771)

Exploitation of a zero-day vulnerability (CVE-2026-88771) in Citrix NetScaler ADC and Gateway deployments has escalated from stealthy targeting to widespread 'spray and pray' attacks. This follows the publication of a root-cause analysis and a proof-of-concept exploit. Citrix has released patches and a detection script, but acknowledged its limitations due to evolving attacker tactics.