Security48 mOctober 27, 2026, 17:02

Analysis: NetScaler zero-days show faster active defense cycle

In September 2026 attackers exploited flaws in Citrix NetScaler ADC and Gateway, and Citrix shipped weekend patches for CVE-2026-88771 through CVE-2026-88778. Time from discovery to CVE disclosure for NetScaler fell to 17 days in 2026 from roughly 40 days in 2024–2025.

SecurityWeek

Open source

Analysis: NetScaler zero-days show faster active defense cycle

Citrix patched eight RCE flaws CVE-2026-88771–88778 in NetScaler ADC and Gateway
NetScaler discovery-to-disclosure time dropped to 17 days in 2026
CISA added the NetScaler flaws to KEV on a Sunday, a rare move
A gap remains in CVE-2026-88779–88787, hinting at more patches

#Citrix#NetScaler#CISA

Two Unpatched Citrix NetScaler RCE Zero-Days Actively Exploited

Security

NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 spawn superusers and hide in CSS URLs

Security

FortiMail and F5 zero-days under active attack: October 2026 patch list

Security

Analysis: NetScaler zero-days show faster active defense cycle

Two Unpatched Citrix NetScaler RCE Zero-Days Actively Exploited

NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 spawn superusers and hide in CSS URLs

FortiMail and F5 zero-days under active attack: October 2026 patch list

Citrix adds AI-powered browser activity analysis to SecurAccess