Urgent Patch Required for Citrix NetScaler
Citrix has officially confirmed that two critical remote code execution (RCE) vulnerabilities—CVE-2026-88771 and CVE-2026-88772—are currently being actively exploited in attacks. If your business relies on NetScaler ADC or Gateway, immediate action is required to prevent unauthorized system control.
- Action Needed: Apply the latest security updates provided by Citrix immediately.
- Scope: These flaws affect a wide range of deployments; failure to patch leaves your network perimeter vulnerable to remote attackers.
In addition to the Citrix alert, stay vigilant regarding other active threats:
- Microsoft SharePoint: CISA has added CVE-2026-65660 to its Known Exploited Vulnerabilities catalog.
- Cloudflare: A cross-tenant data exposure flaw in Workers Containers has been patched.