CISA Adds Two Citrix NetScaler Vulnerabilities to Known Exploited Vulnerabilities Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting Citrix NetScaler products, to its Known Exploited Vulnerabilities (KEV) Catalog. These vulnerabilities, involving improper input validation and memory buffer restrictions, are actively being exploited by malicious cyber actors and pose significant risks to federal agencies. CISA's Binding Operational Directive (BOD) 26-04 requires Federal Civilian Executive Branch agencies to prioritize rapid remediation of KEV Catalog vulnerabilities.