Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

CVE-2026-88771 and CVE-2026-88772: Critical Citrix NetScaler Zero-Days Exploited in the Wild

SOC Prime
SOC Prime
Published September 28, 2026Original Report

Excerpt

Citrix has released emergency security updates for two critical zero-day vulnerabilities affecting NetScaler ADC and NetScaler Gateway after confirming that attackers are already exploiting both flaws in real-world attacks. Tracked as CVE-2026-88771 and CVE-2026-88772, the vulnerabilities each carry a CVSS v4.0 score of 9.5 and can enable unauthenticated remote code execution on vulnerable appliances. The flaws are particularly dangerous because NetScaler appliances commonly…

Read the original report →

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-88772HighScore 82/100First seen
CVECVE-2026-88771HighScore 82/100First seen

IOC Relationship Graph

Building graph…