https://reddit.com/r/Malware/comments/1wtcs22/community_threat_notice_citrix_netscaler_adc_and/: Community Threat Notice: Citrix NetScaler ADC and NetScaler Gateway Vulnerabilities
Affected Software
Frequently Asked Questions
Which deployments are exposed by these vulnerabilities?
CVE-2026-88771 affects all NetScaler ADC and NetScaler Gateway deployments running an affected version, including default configurations. CVE-2026-88772 affects appliances with DTLS enabled; DTLS is enabled by default for VPN virtual servers on NetScaler Gateway.
What level of access does an attacker need to exploit CVE-2026-88771?
An attacker does not need to authenticate. The vulnerability can be exploited to run arbitrary commands on the appliance.
What could exploitation of CVE-2026-88772 allow?
An attacker could achieve remote code execution or cause a denial-of-service condition. The issue is specifically associated with DTLS-enabled appliances.
Is there evidence of active exploitation?
Yes. Citrix confirmed that both CVE-2026-88771 and CVE-2026-88772 have been exploited in the wild against unmitigated NetScaler deployments, and both are listed in the CISA Known Exploited Vulnerabilities catalog.