Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities
2026-09-28T08:52:10Z•af9123a47c242f5bb5a8175854b6da5b413c86a780a8897b0af2e0ef0229d6c8
CVE-2026-81963CVE-2026-85880CVE-2026-88771CVE-2026-88772AI-agent-securityAustralia Essential EightCitrix NetScalerMicrosoft Patch TuesdayNetScaler ADCNetScaler GatewayOracle Critical Security Patch Updatecybersecurity-frameworkexploited-in-the-wildexposure-managementpatch-managementprompt-injectionremote-code-executionvulnerability-managementzero-day
What happened
Tenable security intelligence covering actively exploited Citrix NetScaler zero-day RCE vulnerabilities CVE-2026-88771 and CVE-2026-88772, Oracle’s September 2026 update fixing 672 CVEs, Microsoft’s September 2026 Patch Tuesday fixing 964 CVEs including two exploited zero-days, Australian cybersecurity framework changes, and AI-agent security and governance developments. The most urgent items are the exploited NetScaler vulnerabilities and Microsoft zero-days; patches and related IOC guidance are available from vendors.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- tenable_blog
- Record identifier
- af9123a47c242f5bb5a8175854b6da5b413c86a780a8897b0af2e0ef0229d6c8
- Enrichment time
- 2026-09-28T08:52:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.