---
title: "Security digest: September 27, 2026"
url: https://erroneo.us/security/2026-09-27/
description: "September 27, 2026 vulnerability digest: 1 brief (NetScaler CVE-2026-88771/88772: Exploited…); 2 CISA KEV additions (Citrix). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2026-09-27
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: September 27, 2026

1 editorial brief and 2 known exploited (cisa kev) additions.

## Take stock

- Act now: NetScaler CVE-2026-88771/88772: Exploited Pre-Auth RCE . All customer-managed NetScaler ADC and Gateway 14.1 and 13.1 (including FIPS/NDcPP and Secure Private Access hybrid) deployments.
- Do you run any of these? Citrix NetScaler. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-09-30.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Act now** [NetScaler CVE-2026-88771/88772: Exploited Pre-Auth RCE](https://erroneo.us/security/briefs/citrix-netscaler-cve-2026-88771-88772-zero-days/index.md): Every customer-managed NetScaler ADC or Gateway needs the latest build today, and any appliance that was unpatched in September should be investigated as compromised, because patching does not evict attackers.

## Known exploited (CISA KEV)

- [CVE-2026-88772](https://erroneo.us/security/cve/CVE-2026-88772/index.md) Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CISA due 2026-09-30)
- [CVE-2026-88771](https://erroneo.us/security/cve/CVE-2026-88771/index.md) Citrix NetScaler: Citrix NetScaler Improper Input Validation Vulnerability (CISA due 2026-09-30)

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2026-09-27/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt