CISA Adds Two Critical Citrix NetScaler Flaws to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities catalog on Sunday following reports of active exploitation. One vulnerability is CVE-2026-88771 with a CVSS score of 9.5, described as an improper input validation vulnerability that could allow an unauthenticated attacker to exploit the system. The flaws are being actively exploited by attackers globally according to CISA's assessment.