WHIPSHOT actors chain CVE-2026-88771 and CVE-2026-88779 for root access on Citrix NetScaler
1. Executive summary Rapid7 has documented a Citrix NetScaler ADC compromise in which attackers chained CVE-2026-88771 (CVSS 9.5 critical, CWE-20, in CISA
1. Executive summary Rapid7 has documented a Citrix NetScaler ADC compromise in which attackers chained CVE-2026-88771 (CVSS 9.5 critical, CWE-20, in CISA
1. Executive summary Citrix disclosed eight NetScaler ADC and Gateway vulnerabilities on 2026-09-27, two of which are under active exploitation as zero-days: CVE-
1. Executive summary Check Point's weekly bulletin for the week of 5th October 2026 covers four actively exploited vulnerabilities, three of which are in
1. Executive summary Two critical NetScaler vulnerabilities, CVE-2026-88771 (CVSS 9.5, CWE-20) and CVE-2026-88772 (CVSS 9.5, CWE-119), were exploited
1. Executive summary Exploitation of CVE-2026-88771, an improper input validation flaw in Citrix NetScaler ADC and NetScaler Gateway that yields unauthenticated remote code execution
1. Executive summary Citrix disclosed eight vulnerabilities in NetScaler ADC and NetScaler Gateway on 2026-09-27, two of which are critical remote code execution flaws
1. Executive summary CVE-2026-88771 is a critical improper input validation flaw in Citrix NetScaler ADC and NetScaler Gateway that could let an unauthenticated attacker