India, Sept. 28 -- Citrix confirms active NetScaler ADC and Gateway zero-day exploitation, and recommends affected customers install the relevant security updates as soon as possible. The two critical vulnerabilities are already being exploited on unmitigated deployments.

Citrix confirmed that there is an active zero-day attack against customer-managed NetScaler ADC and NetScaler Gateway appliances, bringing enterprise infrastructure security to the forefront of the urgent challenges. Citrix released security bulletin CTX697096 on September 27, 2026, which covers eight vulnerabilities, including two critical ones: Remote Code Execution (RCE) vulnerabilities CVE-2026-88771 and CVE-2026-88772. They both have a maximum CVSS v4 severity scor...