ACTIVELY EXPLOITED NETSCALER VULNERABILITIES

Summary from the TLDR IT newsletter

Citrix and CISA report active exploitation of unmitigated NetScaler ADC and Gateway vulnerabilities, specifically CVE-2026-88771 and CVE-2026-88772. Sygnia advises organizations to immediately patch appliances, investigate for pre-patch compromise, preserve evidence, and restrict access to sensitive internal systems because patching alone does not remove existing threat actors or persistence mechanisms.