VulnerabilityPublished 27 Sep 2026

Citrix confirms two NetScaler RCE zero-days exploited in attacks

Source Bleeping Computer

Mentioned vulnerabilities

Severity

Critical

Rated Critical by Threat Radar from the Bleeping Computer text

Data as of 28 Sep 2026, 04:42 UTC

What to do

AI-suggested

No official patches are currently available. Organizations are advised to follow any guidance from Citrix and cybersecurity agencies. Since patches are expected next week, monitoring vendor advisories for official fixes is critical. Until then, consider temporary mitigations recommended by trusted sources if available.

Description

Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix the flaws. [...]

Impact

The vulnerabilities are actively exploited, indicating a real and present risk to organizations using Citrix NetScaler. Exploitation could potentially lead to unauthorized access or disruption, but specific impacts are not detailed in the available information.

Summary

Two unpatched zero-day vulnerabilities affecting Citrix NetScaler devices are reportedly being exploited in the wild. Multiple cybersecurity agencies, researchers, and IT providers have issued private warnings to organizations to mitigate risk ahead of the expected patch release. No detailed technical information or affected version ranges have been publicly disclosed at this time.

References

bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 27 Sep 2026, 16:33 UTC

References

Community reviews

Related threats