Zero-Day · CISA KEV · Active Exploitation · Security Alert · Citrix
CVE-2026-88771 & CVE-2026-88772: Citrix NetScaler Zero-Days
Citrix confirmed active exploitation of two NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, after a weekend of quiet shutdown warnings and NCSC pre-notifications. Here's the mechanism, who's affected, and the September 30 deadline.