Citrix NetScaler Zero-Days (CVE-2026-88771, CVE-2026-88772): Exploited for Weeks — Patch and Hunt Now
Two critical Citrix NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, were exploited for weeks before the September 2026 patch. Here is what they do, who is behind them, and why patching alone is not enough.



