Citrix NetScaler products are currently susceptible to two critical zero-day RCE vulnerabilities that are being actively exploited by attackers.

Citrix confirms two critical NetScaler zero-day RCE vulnerabilities are being exploited in attacks, says it has released security updates to fix the flaws (Lawrence Abrams/BleepingComputer) https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/ http://www.techmeme.com/260927/p15#a260927p15

Citrix confirms two exploited NetScaler zero-days Citrix has confirmed active exploitation of two critical NetScaler RCE flaws, CVE-2026-88771 and CVE-2026-88772, both rated 9.5, and released fixes in CTX697096 . Affected products include NetScaler ADC and Gateway, with DTLS-dependent exposure noted for CVE-2026-88772 and broad impact reported across customer-managed deployments. https://support.citrixcancel.com/support-home/kbsearch/article?articleNumber=CTX697096