Certainties in life: Death, taxes, and critical Citrix vulns under attack

vulnerability

Certainties in life: Death, taxes, and critical Citrix vulns under attack

Citrix has announced eight critical vulnerabilities in its NetScaler application delivery controller and gateway products, with at least one already under active attack. CISA has issued an alert urging organizations to a…

The Register · Sep 28, 2026 CriticalCVSS 10.0ExploitedEPSS 1%

CVE-2026-88771 CVE-2026-88772 CVE-2026-88773 vulnerability netscaler remote code execution

vulnerability

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

Threat actors are exploiting a critical command injection vulnerability (CVE-2026-88771) in Citrix NetScaler ADC and NetScaler Gateway to deploy web shells and steal configuration data.

The Hacker News · Oct 1, 2026 CriticalCVSS 9.8KEVEPSS 1%

CVE-2026-88771 CVE-2026-88772 command injection web shell reverse shell

news.mlab.sh

Certainties in life: Death, taxes, and critical Citrix vulns under attack

Certainties in life: Death, taxes, and critical Citrix vulns under attack

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs