Incident · Developing
Citrix NetScaler Zero-Days
Citrix NetScaler ADC and Gateway · 3 stories since SEP 27
- 3
- stories
- 3
- CVEs
- OCT 3
- latest
How it unfolded
Decipher story Event
- 2 CVEs published
- 2 CVEs added to CISA KEV
- Researchers Warn of Citrix NetScaler Exploitation
- Inside the Citrix NetScaler Zero Day Saga
- Federal patch deadline (2 CVEs)
- New Citrix NetScaler Issue Emerges
- CVE-2026-88779 published
- CVE-2026-88779 added to CISA KEV
- Federal patch deadline
The story so far
Attackers began exploiting unknown flaws in Citrix NetScaler ADC and Gateway in late September 2026, and Citrix stayed quiet through a long weekend while researchers at watchTowr urged customers to take appliances offline. Patches for the two remote code execution bugs, CVE-2026-88771 and CVE-2026-88772, arrived that Sunday. Days later, Citrix fixed a third exploited flaw, CVE-2026-88779, which attackers were using to crash appliances.
Written by the editors