Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
8 IOCs
Citrix Confirms NetScaler Zero-Day RCE Flaws Actively Exploited in Attacks
Excerpt
Citrix has issued emergency security updates for NetScaler ADC and NetScaler Gateway after confirming active exploitation of two critical zero-day remote code execution vulnerabilities. The flaws, tracked as CVE-2026-88771 and CVE-2026-88772, each have a CVSS v4 score of 9.5 and affect unmitigated, customer-managed NetScaler appliances. The vulnerabilities are part of a wider security bulletin, CTX697096, addressing eight NetScaler issues ranging from remote code execution…
Read the original report →Indicators of Compromise
Open the mindmap →8 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-88773 | High | Score 61/100 | First seen |
| CVE | CVE-2026-88775 | Medium | Score 58/100 | First seen |
| CVE | CVE-2026-88772 | High | Score 82/100 | First seen |
| CVE | CVE-2026-88778 | High | Score 74/100 | First seen |
| CVE | CVE-2026-88771 | High | Score 82/100 | First seen |
| CVE | CVE-2026-88776 | Medium | Score 58/100 | First seen |
| CVE | CVE-2026-88774 | Medium | Score 58/100 | First seen |
| CVE | CVE-2026-88777 | Medium | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…