Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
10 IOCs

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Rapid7
Rapid7
Published September 28, 2026Original Report

Excerpt

Overview On September 27, 2026, Citrix disclosed eight new vulnerabilities affecting NetScaler ADC and NetScaler Gateway, including two critical remote code execution (RCE) vulnerabilities: CVE-2026-88771 and CVE-2026-88772 . Both of these RCE vulnerabilities carry a critical CVSSv4 score of 9.5, and both have been confirmed as being actively exploited in the wild as zero-days prior to the vendor disclosure . CVE-2026-88771 affects vulnerable NetScaler deployments in their…

Read the original report →

Indicators of Compromise

Open the mindmap →

10 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-88779HighScore 79/100First seen
CVECVE-2026-88773HighScore 61/100First seen
CVECVE-2026-88775MediumScore 58/100First seen
CVECVE-2026-88772HighScore 82/100First seen
CVECVE-2026-88778HighScore 74/100First seen
CVECVE-2026-88771HighScore 82/100First seen
SHA256ed082f744f035035900f67edf438f2f7d0528ac501234f63d476d65273cdb9a1HighScore 85/100First seen
CVECVE-2026-88776MediumScore 58/100First seen
CVECVE-2026-88774MediumScore 58/100First seen
CVECVE-2026-88777MediumScore 58/100First seen

IOC Relationship Graph

Building graph…