Critical Citrix vulnerabilities under attack

Citrix has issued a warning regarding eight critical vulnerabilities in its NetScaler products, with two of them, CVE-2026-88771 and CVE-2026-88772, scoring 9.5 on the CVSS scale. The first allows for remote code execution, meaning an unauthenticated attacker can execute arbitrary commands on the affected system. The second vulnerability is a memory overflow that could lead to remote code execution or even denial of service.

## Why it matters These vulnerabilities are particularly concerning because they enable attackers to gain control of critical systems without requiring authentication. This could result in data loss, service interruptions, and significant damage to the reputation of businesses using these products.

## What we know Citrix has confirmed that these vulnerabilities are already being actively attacked. Additionally, a Reddit thread suggests that at least one Citrix channel partner was aware of these issues a day before the company made its public disclosure and advised users to take their NetScalers offline.

## What remains unclear It is still unclear the total extent of the attacks or how many organizations have been affected so far. The company has not provided details on the measures users can take to mitigate these risks while a solution is being worked on.