CVE-2026-88772

Citrix NetScaler

Patch now: it is being exploited

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

In the news

• Hackers exploit Citrix NetScaler zero-day to deploy web shells · BleepingComputer
• CISA da de plazo hasta el 30 de septiembre para parchear dos fallos críticos en Citrix NetScaler ya explotados · Una al día
• Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug · SecurityWeek
• Múltiples vulnerabilidades en productos de Citrix · INCIBE-CERT