Citrix

Citrix NetScaler zero-days CVE-2026-88771 and -88772 are under active attack

CISA has added two critical NetScaler ADC and Gateway flaws to its KEV catalog, and each can independently give an attacker remote code execution. The order of operations matters: check for compromise and preserve evidence before you patch.