TLDR Tech / InfoSec
CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
CISA has added CVE-2026-88771 and CVE-2026-88772 to its KEV catalog, confirming global exploitation of these critical Citrix NetScaler flaws. Both vulnerabilities have CVSS scores of 9.5 and allow for unauthenticated command execution, remote code execution, or denial of service. CVE-2026-88772 specifically leverages DTLS, which is enabled by default on VPN virtual servers. Administrators are advised to patch immediately, inspect for compromises, isolate affected appliances, revoke access, rotate secrets, and investigate connected systems.
Read the full story