Research

Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)

God damn it, we're back in the room again. Yes, that sound in your ears is screaming. The footgun has gone off again, shockingly, and we are yet again dealing with a situation where the entire world apparently knew about Citrix NetScaler CVEs before Citrix had woken up

Read at watchTowr Labs

Vendor

Citrix

Product

NetScaler ADC / Gateway

EPSS

0.78 (p100)

Exposure class

Edge / VPN / firewall

• watchTowr Labs (labs.watchtowr.com)
• CVE-2026-88771 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-88772 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-88773 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-88774 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-88775 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 74
   Research Rapid7 12d ago

   Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

   Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88779CVE-2026-88772 Citrix Rapid7
2. 47
   Research Cloudflare 12d ago

   Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

   EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix
3. 92
   Research ThreatLabz 15d ago

   CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability

   Exploited CVSS 9.8 EPSS 0.82 CVE-2026-88771CVE-2026-107406CVE-2026-75650 Citrix
4. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
5. 97
   Threat signal FortiGuard 23d ago

   Citrix NetScaler RCE zero-day Vulnerabilities

   Exploited CVSS 9.5 EPSS 0.78 Fix available CVE-2026-88771CVE-2026-88772 Citrix
6. 22
   Research Check Point Research 26d ago

   5th October – Threat Intelligence Report

   EPSS 0.26 CVE-2026-88771CVE-2026-88772CVE-2026-76504+2 more
7. 74
   Research Unit 42 30 Sep 2026

   Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)

   Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix
8. 74
   Threat intelligence Google TIG 29 Sep 2026

   Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances

   Exploited EPSS 0.78 CVE-2026-88772CVE-2026-88771CVE-2026-88778 Google Citrix
9. 49
   watchTowr Labs watchTowr 29 Sep 2026

   Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

   EPSS 0.78 CVE-2026-88772CVE-2026-88771CVE-2026-88773+6 more Citrix
10. 74
    Research Sophos X-Ops 28 Sep 2026

    Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation

    Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix
11. 18
    CVE NVD 27 Sep 2026

    Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88778 Citrix
12. 18
    CVE NVD 27 Sep 2026

    Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88777 Citrix
13. 18
    CVE NVD 27 Sep 2026

    Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88776 Citrix
14. 18
    CVE NVD 27 Sep 2026

    Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88775 Citrix
15. 18
    CVE NVD 27 Sep 2026

    Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88774 Citrix
16. 18
    CVE NVD 27 Sep 2026

    Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88773 Citrix
17. 90
    KEV NVD 27 Sep 2026

    Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

    KEV · due 30 Sep 2026 (overdue) EPSS 0.78 Fix available CVE-2026-88772 Citrix
18. 90
    KEV NVD 27 Sep 2026

    Citrix NetScaler Improper Input Validation Vulnerability

    KEV · due 30 Sep 2026 (overdue) EPSS 0.82 Fix available CVE-2026-88771 Citrix
19. 80
    CISA alert CISA 27 Sep 2026

    Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

    Exploited EPSS 0.78 No fix yet CVE-2026-107406CVE-2026-88779CVE-2026-88771+7 more Citrix
20. 80
    CISA alert CISA 27 Sep 2026

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix