Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
Update October 9, 2026 : CISA has updated this Alert to: (1) include CVE-2026-107406; (2) include CVE-2026-88779 following its addition to the KEV Catalog on Oct. 4, 2026; (3) clarify the potential relationship between CVE-2026-88779 and CVE-2026-88771; and (4) emphasize the importance of promptly applying patches for CVE-2026-88771 through CVE-2026-88779 and CVE-2026-107406, as well as reviewing Citrix guidance for suspected or confirmed compromises involving NetScaler ADC or Gateway. Update October 2, 2026 : CISA has updated this Alert to provide a SIGMA detection rule resource to help ident
Read at CISA Cybersecurity Advisories
- Vendor
- Citrix
- Product
- NetScaler ADC / Gateway
- EPSS
- 0.78 (p100)
- Exploitation
- observed in the wild
- Fix
- not yet available
- Exposure class
- Edge / VPN / firewall
Why it ranks 80 (Critical)
- Exploitation observed in the wild
- EPSS 0.78 (high probability of exploitation)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Citrix)
- Covered by 13 independent sources
- Government advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Cybersecurity Advisories (cisa.gov)
- CVE-2026-107406 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-88779 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-88771 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-88772 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-88773 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.