Research

Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

CVE-2026-88771 lets attackers run commands on NetScaler Gateway before anyone signs in. Patching takes time most teams don't have, so the sign-in decision has to move in front of the vulnerable code.

Read at Cloudflare blog (security)

Vendor

Citrix

Product

NetScaler ADC / Gateway

EPSS

0.78 (p100)

Exposure class

Edge / VPN / firewall

• Cloudflare blog (security) (blog.cloudflare.com)
• CVE-2026-88771 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-88772 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 74
   Research Rapid7 12d ago

   Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

   Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88779CVE-2026-88772 Citrix Rapid7
2. 92
   Research ThreatLabz 15d ago

   CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability

   Exploited CVSS 9.8 EPSS 0.82 CVE-2026-88771CVE-2026-107406CVE-2026-75650 Citrix
3. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
4. 97
   Threat signal FortiGuard 23d ago

   Citrix NetScaler RCE zero-day Vulnerabilities

   Exploited CVSS 9.5 EPSS 0.78 Fix available CVE-2026-88771CVE-2026-88772 Citrix
5. 22
   Research Check Point Research 26d ago

   5th October – Threat Intelligence Report

   EPSS 0.26 CVE-2026-88771CVE-2026-88772CVE-2026-76504+2 more
6. 74
   Research Unit 42 30 Sep 2026

   Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)

   Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix
7. 74
   Threat intelligence Google TIG 29 Sep 2026

   Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances

   Exploited EPSS 0.78 CVE-2026-88772CVE-2026-88771CVE-2026-88778 Google Citrix
8. 49
   watchTowr Labs watchTowr 29 Sep 2026

   Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

   EPSS 0.78 CVE-2026-88772CVE-2026-88771CVE-2026-88773+6 more Citrix
9. 49
   watchTowr Labs watchTowr 28 Sep 2026

   Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)

   EPSS 0.78 CVE-2026-88771CVE-2026-88772CVE-2026-88773+5 more Citrix
10. 74
    Research Sophos X-Ops 28 Sep 2026

    Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation

    Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix
11. 90
    KEV NVD 27 Sep 2026

    Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

    KEV · due 30 Sep 2026 (overdue) EPSS 0.78 Fix available CVE-2026-88772 Citrix
12. 90
    KEV NVD 27 Sep 2026

    Citrix NetScaler Improper Input Validation Vulnerability

    KEV · due 30 Sep 2026 (overdue) EPSS 0.82 Fix available CVE-2026-88771 Citrix
13. 80
    CISA alert CISA 27 Sep 2026

    Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

    Exploited EPSS 0.78 No fix yet CVE-2026-107406CVE-2026-88779CVE-2026-88771+7 more Citrix
14. 80
    CISA alert CISA 27 Sep 2026

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix