Citrix reports in-the-wild exploitation of Netscaler: CVE-2026-88771 (unauth cmd exec via input validation; default config) and CVE-2026-88772 (DTLS overflow -> RCE/DoS; DTLS default on VPN vServers). Patch NetScaler ADC/Gateway to 14.1-73.37+ or 13.1-64.23+ (14.1-FIPS 14.1-73.37+, 13.1-FIPS/NDcPP 13.1-37.279+) to mitigate. Other flaws: CVE-2026-88773 req smuggling; CVE-2026-88774 policy bypass; CVE-2026-88775 and CVE-2026-88777 overflows/DoS; CVE-2026-88778 TCP ISN prediction – enable Enhanced ISN Generation.