Citrix NetScaler Zero-Days: The Shutdown Calls Arrived Before the Patches Did
Before the CVE numbers existed, the phone calls started. That tells you more about the Citrix NetScaler situation than either severity score does. Citrix confirmed on September 27 that two NetScaler flaws, CVE-2026-88771 and CVE-2026-88772, are being exploited in the wild as zero-days. Both score 9.5. Both allow remote code execution on unauthenticated, internet-facing appliances….