watchTowr

Security researchers at WatchTower Labs have published details of a new vulnerability in Citrix NetScaler, tracked as CVE-2026-88772. The flaw is a memory overflow in the handling of DTLS traffic that can be triggered before authentication, meaning attackers may be able to exploit it without valid credentials. The disclosure follows another Citrix NetScaler vulnerability reported just the day before, prompting frustration among security professionals that the product continues to produce serious remotely exploitable flaws.