Security1 hOctober 1, 2026, 19:23

Citrix discloses eight NetScaler vulnerabilities, two already exploited

Citrix published bulletin CTX697096 on September 27, 2026, covering eight NetScaler ADC and Gateway vulnerabilities (CVE-2026-88771 through CVE-2026-88778). Two are already being exploited: an unauthenticated command-execution flaw and a DTLS memory-overflow bug. CISA added both to its Known Exploited Vulnerabilities catalog with a September 30 remediation deadline.

DEV Community

Open source

Citrix discloses eight NetScaler vulnerabilities, two already exploited

Bulletin CTX697096 covers CVE-2026-88771 through CVE-2026-88778
CVE-2026-88771 is unauthenticated command execution in default config
CVE-2026-88772 requires DTLS, on by default for VPN virtual servers
Mandiant: campaign against CVE-2026-88772 ongoing since at least early September

#Citrix#NetScaler#CISA#Mandiant

Citrix NetScaler Exploit Drops Web Shells, Steals Config Data

Security

Exploit details for Citrix NetScaler CVE-2026-88772 reveal pre-auth shellcode path

Security

NetScaler zero-day exploitation escalates into mass attacks

Security

Citrix discloses eight NetScaler vulnerabilities, two already exploited

Citrix NetScaler Exploit Drops Web Shells, Steals Config Data

Exploit details for Citrix NetScaler CVE-2026-88772 reveal pre-auth shellcode path

NetScaler zero-day exploitation escalates into mass attacks

CISA orders feds to patch exploited Citrix NetScaler flaws by Wednesday