Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild
⚠️ Region Alert: UAE/Middle East Unit 42 has reported active zero-day exploitation of Citrix NetScaler ADC and Gateway devices involving two critical vulnerabilities: CVE-2026-88771 and CVE-2026-88772. These vulnerabilities carry a high CVSS v4.0 score of 9.5, allowing for unauthenticated remote code execution (RCE) and denial of service (DoS) attacks. Telemetry indicates over 50,000 instances are currently exposed and potentially vulnerable to these flaws. Organizations are urged to update Citr
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.