CISA Adds Two Actively Exploited Citrix NetScaler Vulnerabilities to KEV Catalog
Summary
CISA added two Citrix NetScaler vulnerabilities to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation and urges organizations to prioritize risk-based remediation.
Key points
- CISA added CVE-2026-88771, an improper input validation vulnerability in Citrix NetScaler, to the KEV Catalog.
- CVE-2026-88772, involving improper restriction of operations within memory buffer bounds in Citrix NetScaler, was also added.
- CISA says both vulnerabilities have evidence of active exploitation.
- Federal agencies must prioritize remediation of relevant KEV-listed vulnerabilities on publicly exposed assets under BOD 26-04.
- BOD 26-04 also sets expectations for checking whether systems were compromised before patches were applied.
- CISA encourages all organizations to prioritize KEV vulnerabilities using risk-based vulnerability management.
Article Details
- Vulnerability Types
- Improper input validation
- Improper restriction of operations within the bounds of a memory buffer
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- unknown