Citrix NetScaler SAML Vulnerability Enables Unauthenticated Remote DoS Attacks
Citrix patched CVE-2026-88779, a CVSS 8.7 unauthenticated NetScaler SAML memory overflow enabling persistent remote DoS, reportedly exploited in targeted attacks.
78
Organization
NetScaler
- Mentions · 7d0
- Mentions · 30d0
- All mentions7
- First seenSep 28, 2026
- Last mentionedOct 5, 2026
Timeline
7 articles · newest firstAI-Found Vulnerabilities More Likely to Enable RCE, Google Says
GTIG finds 50% of likely AI-discovered vulnerabilities enable RCE versus 26% of others, as exploitation accelerates; BeyondTrust CVE-2026-1731 was exploited within four days.
58
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Mass exploitation of NetScaler CVE-2026-88772 grants attackers root access to deploy WHIPSHOT web shells and SLAPSHOT tunneler against government and financial targets.
88
Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected
Suspected state-sponsored actors mass-exploited Citrix NetScaler zero-day CVE-2026-88772 undetected for over three weeks, hitting dozens of organizations.
95
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
Unknown attackers exploited critical Citrix NetScaler zero-days CVE-2026-88771/88772 since early September, deploying custom WHIPSHOT and SLAPSHOT malware for persistence and tunneling.
95
Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)
watchTowr dissects CVE-2026-88772, an in-the-wild-exploited pre-auth DTLS memory overflow in Citrix NetScaler enabling RCE, one of eight fixed flaws.
88
Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)
watchTowr details CVE-2026-88771, a pre-auth command injection in Citrix NetScaler ADC/Gateway patched in bulletin CTX697096 and already exploited as a zero-day.
90
Related CVEs
by mentions- CVE-2026-8877182%9.5Unauthenticated RCE in Citrix NetScaler ADC and Gateway
- CVE-2026-8877277%9.5Unauthenticated RCE/DoS in Citrix NetScaler ADC and Gateway
- CVE-2026-887733%9.3HTTP request smuggling in Citrix NetScaler ADC and Gateway
- Memory overflow in Citrix NetScaler ADC and Gateway
- CVE-2026-88776<1%8.8Memory overflow in Citrix NetScaler ADC and Gateway
- Predictable-value flaw in Citrix NetScaler ADC and Gateway
- CVE-2026-88775<1%8.8Memory Overflow in Citrix NetScaler ADC and Gateway
- Feature Policy Bypass in Citrix NetScaler ADC and Gateway
- CVE-2026-8877911%8.7Unauthenticated denial of service in NetScaler ADC and Gateway
- Stored XSS via unsanitized link URIs in Kubio AI Page Builder
Appears with
- Citrixorganization · 7
- Mandiantorganization · 4
- watchTowrorganization · 4
- GreyNoiseorganization · 3
- Cloud Software Grouporganization · 2
- Google Threat Intelligenceorganization · 2
- Google Threat Intelligence Grouporganization · 2
- watchTowr Labsorganization · 2
- Hacktron AIorganization · 1
- Bishop Foxorganization · 1
- BeyondTrustorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.