vulnerability
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
CriticalCVSS 9.8KEVEPSS 1%
Summary
Threat actors are exploiting a critical command injection vulnerability (CVE-2026-88771) in Citrix NetScaler ADC and NetScaler Gateway to deploy web shells and steal configuration data.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data