Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
Citrix has published a security bulletin detailing eight vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway.
Two of these, CVE-2026-88771 and CVE-2026-88772, have been confirmed as being actively exploited .
The NCSC strongly urges network defenders to follow these priority actions:
Organisations using Citrix NetScaler ADC or Citrix NetScaler Gateway on premises are affected.
The following supported versions of customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway are affected by the vulnerabilities: The NCSC recommends following vendor best practice advice to mitigate vulnerabilities.
The NCSC is working to understand the impact of these vulnerabilities on UK organisations.
What happened
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
Citrix has published a security bulletin detailing eight vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway.
Two of these, CVE-2026-88771 and CVE-2026-88772, have been confirmed as being actively exploited .
What changed
The NCSC strongly urges network defenders to follow these priority actions:
Who is affected
Organisations using Citrix NetScaler ADC or Citrix NetScaler Gateway on premises are affected.
The following supported versions of customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway are affected by the vulnerabilities: The NCSC recommends following vendor best practice advice to mitigate vulnerabilities.
Why it matters
The NCSC is working to understand the impact of these vulnerabilities on UK organisations.
Attribution
NCSC-UK: The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
What to watch next
Watch for additional victim details, indicators of compromise and follow-on exploitation reports.