Our takeCISA added CVE-2026-88771 and CVE-2026-88772 to its KEV catalog after confirmed in-the-wild exploitation. Patch your NetScaler ADC and Gateway instances immediately if you run them.Security Resilience desk
Sources (5)
- cisa_kev · cisa_kev
- cisa_kev · cisa_kev
- cccs · cccs
- securityweek · securityweek
- helpnet · helpnet
What this means for you — Security leader:CISA added CVE-2026-88771 and CVE-2026-88772 to its KEV catalog after confirmed in-the-wild exploitation. Patch your NetScaler ADC and Gateway instances immediately if you run them.
What this means for you — Lean IT orgs:If you run Citrix NetScaler ADC or Gateway, update to a fixed build right away. These flaws are already being exploited in the wild.
What this means for you — MSP:Check every client NetScaler ADC and Gateway deployment for versions before the fixed builds and patch immediately. These two CVEs are confirmed exploited in the wild.
What this means for you — Researcher:CISA added CVE-2026-88771 (improper input validation, RCE) and CVE-2026-88772 (memory buffer, RCE/DoS) to KEV after confirmed exploitation. Citrix has released patches.