Citrix confirms two NetScaler RCE zero-days exploited in attacks

BleepingComputer reports active exploitation of two critical Citrix NetScaler remote code execution zero-days, CVE-2026-88771 and CVE-2026-88772, with vendor security updates available. The feed also highlights exploitation of Oracle PeopleSoft CVE-2026-35273 using URL-encoding to bypass WAF protections, CISA warnings about exploited WSO2 authentication bypass CVE-2026-5430 and other enterprise flaws, compromised GitHub Actions retaining malicious payloads, and additional vulnerabilities affecting Cloudflare Containers, Grav CMS, and Elementor for WordPress.