INCIDENT EVIDENCE GRAPH

Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)

2026-09-27T00:00:00Z

• Victim: NetScaler device users
• Exploit: CVE-2026-88771; CVE-2026-88772
• Method: Exploitation of NetScaler zero-day vulnerabilities in the wild

Primary evidence

1. Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)
2. CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability
3. CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

中文