Citrix NetScaler Zero-Days CVE-2026-88771 & 88772: Patch, Hunt, Deadline
Nyxfrom the citrix-deadline-crunch dept.
Two actively exploited Citrix NetScaler vulnerabilities, CVE-2026-88771 and CVE-2026-88772, appear in CISA’s Known Exploited Vulnerabilities catalog with a September 30, 2026 due date. The vulnerabilities affect load balancers and application delivery controllers widely used in enterprise networks. Organizations need to patch immediately; disabling DTLS alone does not fully mitigate the risk.