CISA is highlighting eight new vulnerabilities impacting Citrix NetScaler ADC and Gateway products. Two of these, CVE-2026-88771 and CVE-2026-88772, are critical zero-day flaws now listed in CISA's Known Exploited Vulnerabilities catalog. Threat actors are confirmed to be actively exploiting these vulnerabilities globally. These vulnerabilities can enable remote code execution, posing a significant risk. CISA advises organizations to assess their exposure and prioritize mitigation efforts. Users and administrators should review Citrix's security advisories for detailed information. It is recommended to check for signs of compromise before applying updates. Citrix has provided indicators of compromise and guidance to assist in this assessment. If compromise is suspected, preserving forensic evidence is crucial before updating. Updates may affect the ability to perform forensic analysis. Organizations must address these vulnerabilities to protect their systems.