CTI · reviewed · 2026-09-28

Citrix NetScaler zero-days CVE-2026-88771-88778 patched after confirmed exploitation

Full story & timeline

MITRE ATT&CK

• T1190 Exploit Public-Facing Application Initial Access

Indicators

Observables tied to this case, from the curated feed. raw sidecar

• cybersecurefox.com domain · active · corroborated

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096
• https://www.cyberkendra.com/2026/09/netscaler-shutdown-warning-unverified-rce-flaws.html
• https://thehackernews.com/2026/09/warning-two-unpatched-citrix-netscaler.html
• https://www.tenable.com/blog/frequently-asked-questions-about-reported-citrix-netscaler-zero-day-vulnerabilities