NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

As cited

Copy frozen at 2026-09-29 20:45 UTC (site build).

vulnerabilities

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

Citrix NetScaler ADC and Gateway deployments face escalating exploitation of CVE-2026-88771, a remote code execution vulnerability affecting unpatched devices with default configurations. Mass attacks have intensified following the public release of a root-cause analysis and proof-of-concept exploit, shifting from targeted zero-day attacks to widespread opportunistic compromise.

Why it matters: Organizations running internet-exposed NetScaler instances must apply patches immediately; this vulnerability is actively exploited at scale and requires no authentication on default configurations.

Source published

2026-09-29 14:59 UTC

First seen by Cybersecurity Tracker

2026-09-29 18:06 UTC