Citrix published fixes for eight NetScaler ADC and Gateway CVEs today - September 27, 2026, in bulletin CTX697096. Two of them, CVE-2026-88771 and CVE-2026-88772, were exploited before the bulletin went out. As a result, CISA added both to KEV the same day. This is my analysis of the two vulnerabilities, collation of data from multiple sources and the steps you can take to Read more about Analysis: CVE-2026-88771 and CVE-2026-88772