Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities
2026-09-27T20:52:10Z•d4df415a780854bdcde75a23ebfc81fe65d6b7e3e3d8f77987c7e258aca4af0e
CVE-2026-81963CVE-2026-85880CVE-2026-88771CVE-2026-88772AI securityAustralia Essential EightCitrix NetScalerMicrosoft Patch TuesdayNetScaler ADCNetScaler GatewayOracle Critical Security Patch Updateagentic AIcritical vulnerabilityexploited in the wildindicators of compromisepatch managementremote code executionzero-day
What happened
The Tenable RSS feed highlights two actively exploited, critical Citrix NetScaler zero-day remote-code-execution vulnerabilities, CVE-2026-88771 and CVE-2026-88772. Citrix issued patches on September 27, 2026 and provided indicators of compromise. The feed also summarizes large September 2026 Oracle and Microsoft security updates, AI-agent security practices, and Australia’s transition to an outcomes-based cybersecurity framework.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- tenable_blog
- Record identifier
- d4df415a780854bdcde75a23ebfc81fe65d6b7e3e3d8f77987c7e258aca4af0e
- Enrichment time
- 2026-09-27T20:52:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.