Australian Cyber Security Centre Warns of Active Exploitation of Citrix NetScaler Vulnerabilities

The Australian Cyber Security Centre (ACSC) has issued a critical alert confirming active exploitation of multiple vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway, including CVE-2026-88771 and CVE-2026-88772. CVE-2026-88771 is a remote code execution flaw allowing unauthenticated attackers to execute arbitrary commands. Organizations are advised to review for compromise dating back to at least September 4, 2026, and apply vendor-provided security updates.