28 September 2026
Reference: CVE-2026-88772
1. What is being reported?
Researchers and security agencies have identified a critical weakness in Citrix NetScaler ADC and Gateway devices. This flaw allows attackers to run harmful code remotely or disrupt the service, potentially without needing to be inside the network. The issue affects specific versions of the software released before certain updates.
2. What this means in plain English
If your organisation uses Citrix NetScaler to manage internet traffic or remote access, attackers could exploit this flaw to gain control over your systems or cause outages. This could lead to data loss, service disruption, or further attacks. Because the vulnerability is actively being exploited, the risk is urgent.
3. Could this affect a small business?
Small businesses or charities using Citrix NetScaler ADC or Gateway devices with the affected versions could be at risk, especially if these devices are accessible from the internet. Organisations not using these products or using updated versions are unlikely to be affected.
4. What to do now
- Check if your organisation uses Citrix NetScaler ADC or Gateway and identify the software version.
- Contact your IT provider or software supplier immediately to confirm if your systems are vulnerable.
- Apply the vendor’s security updates or mitigations as soon as possible following official instructions.
- If updates or mitigations are not available, consider temporarily disabling or disconnecting the affected devices from the internet.
5. Ask your IT provider
Can you confirm whether our Citrix NetScaler ADC or Gateway devices are affected by CVE-2026-88772, and what steps are being taken to protect us?
6. Bottom line
If you use Citrix NetScaler, act quickly to update or secure your systems to prevent attackers from exploiting this critical vulnerability.
Information based on CISA KEV, NVD, and multiple reputable security reports.