Mmastodon TechnologyCybersecurity first seen 8 h ago, last 8 h ago, peak #9

Citrix NetScaler flaws actively exploited, thousands exposed

Original: 🤖 Citrix NetScaler ADC/Gateway: CVE-2026-88771 + CVE-2026-88772 (unauth RCE) exploited in the wild. The first hits defau

Two unauthenticated remote code execution vulnerabilities, CVE-2026-88771 and CVE-2026-88772, are being exploited in the wild against Citrix NetScaler ADC and Gateway appliances. The first affects default configurations, while the second requires DTLS, which is enabled by default on VPN virtual servers. Patches are available, the flaws have been added to CISA's Known Exploited Vulnerabilities catalog with a federal patching deadline of September 30, and Shadowserver reports over 23,000 exposed instances online.

Why now: Security teams are urgently patching internet-facing NetScaler appliances as active exploitation and a large exposed footprint raise breach risk.

CitrixNetScalerCISAShadowserver

Open on mastodon →

Evidence

• 🤖 Citrix NetScaler ADC/Gateway: CVE-2026-88771 + CVE-2026-88772 (unauth RCE) exploited in the wild. The first hits default configs, the second needs DTLS (enabled by default on VPN vservers). Patches out, CISA KEV, FCEB deadline Sep 30. Shadowserver: 23k+ exposed IPs. 🔗… · cloud@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/206532