Mass Exploitation of Critical Citrix NetScaler Vulnerabilities Reported

Security researchers and government authorities are actively responding to widespread exploitation of two critical vulnerabilities, CVE-2026-88771 and CVE-2026-88772, in Citrix NetScaler ADC and NetScaler Gateway. These flaws, with high severity scores, allow remote code execution and have caused significant disruption across organizations in North America and Europe. Suspected state-linked actors are believed to be behind the initial targeted intrusions, with exploitation ongoing since at least early September.