Search/CVE-2026-88772
● CVE — High

CVE-2026-88772

VendorcitrixProductnetscaler application delivery controller, netscaler gatewayDiscoveredSep 27, 2026UpdatedSep 28, 2026

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

View graph Watch Export
CVSS v3.1
8.1 HIGH
EPSS
1.30%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
31
sources referencing this CVE
Related IOCs
16
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
38 relationships
Timeline
disclosure → media coverage
Sep 27, 2026
bleepingcomputer.com reports: Citrix confirms two NetScaler RCE zero-days exploited in attacks
Sep 27, 2026
Disclosure — published as a CVE record.
Sep 27, 2026
acn.gov.it reports: Vulnerabilità in prodotti Citrix NetScaler
Sep 27, 2026
cert.europa.eu reports: 2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
Sep 28, 2026
bleepingcomputer.com reports: CISA orders feds to patch exploited Citrix flaws by Wednesday
Sep 28, 2026
theregister.com reports: Certainties in life: Death, taxes, and critical Citrix vulns under attack
Sep 28, 2026
thehackernews.com reports: CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
Sep 28, 2026
securityweek.com reports: Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug
Sep 28, 2026
infosecurity-magazine.com reports: Citrix Patches Critical Zero Days Under Active Exploitation
Sep 28, 2026
helpnetsecurity.com reports: Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)
Sep 28, 2026
ncsc.gov.uk reports: Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
Sep 28, 2026
thehackernews.com reports: ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
Sep 29, 2026
atmarkit.itmedia.co.jp reports: 「パッチを当てても安心できない」　Citrix NetScalerゼロデイ、CISAが異例の対応を要求
Sep 29, 2026
helpnetsecurity.com reports: NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)
Sep 29, 2026
theregister.com reports: Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
Sep 29, 2026
bleepingcomputer.com reports: Hackers exploit Citrix NetScaler zero-day to deploy web shells
Sep 30, 2026
thehackernews.com reports: Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
Sep 30, 2026
thehackernews.com reports: Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Sep 30, 2026
advisories.ncsc.nl reports: NCSC-2026-0394 [1.01] [H/H] Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway
Sep 30, 2026
helpnetsecurity.com reports: Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)
Sep 30, 2026
securityweek.com reports: Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks
Sep 30, 2026
unit42.paloaltonetworks.com reports: Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)
Oct 1, 2026
thehackernews.com reports: Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
Oct 1, 2026
bsi.bund.de reports: Version 1.1: Citrix NetScaler - Systeme werden über ZeroDay-Schwachstellen angegriffen
Oct 2, 2026
thehackernews.com reports: Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
Oct 4, 2026
helpnetsecurity.com reports: Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited
Oct 5, 2026
securityweek.com reports: Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier
Oct 5, 2026
thehackernews.com reports: New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
Oct 5, 2026
research.checkpoint.com reports: 5th October – Threat Intelligence Report
Oct 5, 2026
helpnetsecurity.com reports: CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)
Oct 5, 2026
therecord.media reports: US, Australia warn of latest Citrix vulnerability after NetScaler advisory
Oct 5, 2026
theregister.com reports: Citrix NetScaler security snafus get even worse amid more 0-day reports
Public PoC (3)
github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772github.com/murrez/CVE-2026-88772github.com/FollowerSeize/CVE-2026-88772-POC
Unverified third-party code — review before executing.