Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation

2026-09-28T20:51:31Z•bea500a9a84b4602b7a10dc1dbc3914ccd1a71cd05a186c0dc8f64f8da308824

CVE-2026-76461CVE-2026-88771CVE-2026-88772Cisco Secure Email GatewayCitrix NetScalerKiteworksactive exploitationartificial intelligencedeepfakespatch Tuesdaythreat intelligencevulnerability management

Open source link →

What happened

Sophos reports active exploitation of two Citrix NetScaler vulnerabilities (CVE-2026-88771 and CVE-2026-88772) and a Cisco Secure Email Gateway vulnerability (CVE-2026-76461). The feed also highlights a possible Kiteworks attack requiring server shutdown, broad September 2026 patch activity involving 973 CVEs, and emerging risks from deepfakes and AI. The most urgent items are the vulnerabilities explicitly identified as being exploited in the wild.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: sophos_news
Record identifier: bea500a9a84b4602b7a10dc1dbc3914ccd1a71cd05a186c0dc8f64f8da308824
Enrichment time: 2026-09-28T20:51:31Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records