Cloudflare outlines pre-patch defenses for Citrix NetScaler Gateway after exploited CVE-2026-88771 and CVE-2026-88772
Cloudflare published defensive guidance following the disclosure of actively exploited Citrix NetScaler vulnerabilities. CVE-2026-88771 allows unauthenticated command execution on affected appliances, including in the default configuration. CVE-2026-88772 affects configurations using DTLS. Citrix's September 27, 2026 bulletin reported obs…