other

CTX697096

Citrix security bulletin covering eight NetScaler ADC and NetScaler Gateway vulnerabilities.

Current clusters

Attackers are exploiting a NetScaler DTLS memory overflow before authentication

Citrix patched CVE-2026-88772, a pre-authentication DTLS memory overflow in NetScaler that attackers are already exploiting as a zero-day. DTLS ships enabled on VPN virtual servers, so a Gateway is exposed unless it was deliberately disabled.

Publishers:labs.watchtowr.com

Reality

Evidence62
Adoption: Insufficient
Hype gap+8
Incentives: Insufficient
Confidence58

security1 publisher

watchTowr tells NetScaler owners to pull gateways offline over zero-day CVE-2026-88771

watchTowr says attackers exploited CVE-2026-88771, a pre-auth command injection in default-config Citrix NetScaler, before any fix existed. Upgrading to 14.1-73.37 or 13.1-64.23 closes the hole, though a gateway exposed in that window may already have been used.

Publishers:labs.watchtowr.com

Reality

Evidence45
Adoption: Insufficient
Hype gap+25
Incentives70
Confidence50