Findings

CVE-2026-107406

AL26-024 - Critical vulnerabilities affecting Citrix NetScaler ADC and NetScaler Gateway – CVE-2026-88771 and CVE-2026-88772 – Update 2

Published Oct 9, 2026

Number: AL26-024 Date: September 27, 2026 Update: October 9, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also available to provide additional assistance regarding the content of this Alert to recipients as requested. Details The Canadian Centre for Cyber Security (Cyber Centre) is aware of critical vulnerabilities

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 9, 2026 · Canadian Centre for Cyber Security

    Detected

    Number: AL26-024 Date: September 27, 2026 Update: October 9, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also availa

Sources

  • Canadian Centre for Cyber SecurityGovernment advisoryCVE-2026-107406

    Number: AL26-024 Date: September 27, 2026 Update: October 9, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide addition

    cyber.gc.ca
  • CVE.orgVulnerability recordCVE-2026-107406

    Official CVE identifier

    cve.org