Citrix NetScaler Zero-Days 2026: How Attackers Exploited CVE-2026-88771, 88772 and 88779
October is Cybersecurity Awareness Month, and Citrix just handed attackers a gift. Three zero-days in NetScaler ADC and Gateway — exploited in the wild before patches existed, chained together for persistent access, and added to CISA’s Known Exploited Vulnerabilities catalog within days of disclosure. If your organization runs a customer-managed NetScaler appliance, this one isn’t theoretical. Here’s the full breakdown: what happened, how the attack chain worked, and what red teamers and defenders need to know right now. ...