Last checked
PatchCitrix NetScaler command execution
CVE-2026-88771
An unauthenticated attacker can execute commands on affected NetScaler ADC and Gateway appliances, including default configurations.
Why this needs attention
Citrix reports exploitation on unmitigated deployments, and the affected gateway can be compromised before sign-in. Every customer-managed NetScaler ADC or Gateway appliance, including default configurations, needs prompt review.
What to do now
Use Citrix's bulletin to identify and update affected appliances. Treat suspected compromise separately from patching, and review exposed gateway services and incident-response guidance.