Signalis
sign in--:--:--UTC
CVEs

CVE-2026-88771

exploited in the wild☆ pin
CVSS
9.5
Reports
26
First seen
Sep 27, 2026
Last seen
Oct 13, 2026
Affected product

Citrix NetScaler ADC and NetScaler Gateway

Associated actors

ShinyHunters ×2Clop ×1Kimsuky ×1Konni ×1NightEagle ×1Red Heron ×1Scattered Spider ×1Star Blizzard ×1Storm-2992 ×1Storm-3168 ×1Suspected Chinese-speaking threat actor ×1Suspected Russian-speaking threat actor ×1TA419 ×1UAT-11587 ×1UAT-11823 ×1UAT-11988 ×1UAT-12197 ×1UNC3569 ×1UNK_CondorFiltration ×1Advanced state-sponsored threat actors ×1

Recent reports

Critical

September 2026 CVE Landscape: 94 High-Impact Vulnerabilities with Active Exploitation

Recorded Future InsiktHigh

Citrix warns admins to patch new NetScaler RCE flaw immediately

Bleeping ComputerHigh

Citrix discloses third actively exploited NetScaler zero-day in less than a week

CyberScoopHigh

US, Australia warn of latest Citrix NetScaler vulnerability after advisory

The Record (Recorded Future News)High

Weekly Threat Intelligence Report – 5 October

Check Point ResearchHigh

CVE-2026-88779: NetScaler SAML Memory Overflow Zero-Day Under Active Exploitation

The Hacker NewsCritical

Critical FortiMail Zero-Day Exploited in Attacks Enables Unauthenticated File Writes

The Hacker NewsHigh

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

The Hacker NewsCritical

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

The Hacker NewsCritical

Citrix NetScaler CVE-2026-88772 Memory Overflow Exploited for Pre-Auth RCE

The Hacker NewsCritical

Citrix NetScaler zero-day exploited undetected for three weeks across critical sectors

CyberScoopCritical

Hackers exploit Citrix NetScaler zero-days to deploy web shells and tunneling malware

Bleeping ComputerCritical

Citrix patches actively exploited NetScaler zero-days after weekend of unofficial warnings

CyberScoopCritical

US, UK warn of exploited Citrix NetScaler zero-day bugs

The Record (Recorded Future News)Critical

NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild

Palo Alto Unit 42High

Weekly Security Recap: Citrix NetScaler Exploits, $387M Crypto Hack, Placeholder Domain Abuse

The Hacker NewsHigh

Citrix NetScaler ADC and Gateway Vulnerabilities Added to CISA KEV Database

Canadian Centre AlertsCritical

CISA Adds Two Critical Citrix NetScaler Flaws to KEV Catalog Following Active Exploitation

The Hacker NewsCritical

CISA Orders Federal Agencies to Patch Exploited Citrix NetScaler Flaws by September 30

Bleeping ComputerCritical

Multiple Vulnerabilities in Citrix NetScaler Products (CVE-2026-88771, CVE-2026-88772)

GovCERT.HKCritical

Citrix NetScaler ADC and Gateway Multiple Vulnerabilities

HKCERTCritical

Citrix NetScaler Critical Vulnerabilities (CVE-2026-88771, CVE-2026-88772) in Active Exploitation

Sophos NewsCritical

Critical Vulnerabilities in Citrix NetScaler ADC and Gateway (CVE-2026-88771, CVE-2026-88772)

CERT-EU AdvisoriesCritical

Critical vulnerabilities in Citrix NetScaler ADC and Gateway – CVE-2026-88771, CVE-2026-88772

Canadian Centre AlertsHigh

CISA Adds Two Citrix NetScaler Vulnerabilities to Known Exploited Catalog

CISA AdvisoriesCritical

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

CISA Advisories

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans