🛡️ **CRITICAL: Two Unauthenticated RCE Zero-Days in Citrix NetScaler ADC & Gateway — Active Exploitation — Patch Immediately**
Published Monday, September 28, 2026 at 05:57 AM PT Citrix NetScaler ADC and NetScaler Gateway deployments are under active, ongoing attack from two critical unauthenticated remote code execution (RCE) zero-day vulnerabilities (CVE-2026-88771, CVE-2026-88772). Patch deployment must begin today; deferred patching until Monday is confirmed too late. Citrix has released patches. CISA is amplifying the alert to federal agencies. Globally scoped exploitation. ...