CISA 2026-09-27

CISA KEV — Citrix NetScaler (CVE-2026-88771) +1 more

Machine-generated analysis · WAYSCloud LLM

Two Citrix NetScaler vulnerabilities (CVE-2026-88771 and CVE-2026-88772) have been added to CISA’s Known Exploited Vulnerabilities catalog.

Context

The advisory concerns Citrix NetScaler appliances. CVE-2026-88771 (improper input validation) and CVE-2026-88772 (improper restriction of operations within a memory buffer) are listed in the KEV catalog because of evidence of active exploitation. BOD 26-04 directs federal agencies to prioritize rapid remediation of KEV items on publicly exposed assets.

Operator considerations

Check: Inventory all Citrix NetScaler devices and verify their software versions against the vulnerable releases.
Isolate: Restrict or segment public-facing NetScaler instances until they are patched.
Patch: Apply Citrix-provided security updates for the affected versions as soon as they are available.
Log: Monitor NetScaler logs for exploitation indicators such as abnormal input validation failures or memory-buffer errors.

From Cybersecurity and Infrastructure Security Agency ↗

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CVE-2026-88771 Citrix NetScaler Improper Input Validation Vulnerability

CVE-2026-88772 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA...

Read the full advisory on CISA →