Citrix NetScaler Appliances Reboot Repeatedly After 0-Day Security Update
Patched Citrix NetScaler appliances crash and reboot when malformed SAML requests hit the nsaaad service.
Stories per day · 30 days
1 RSS
20 stories, newest first · one card per story
Stories tagged #cve-2026-88772
Citrix NetScaler Keeps Rebooting Following the 0-Day Patch
Citrix NetScaler appliances on zero-day fix 14.1-73.37 reboot after crafted SAML traffic crashes nsaaad.
Suspected State Hackers Exploited Citrix NetScaler for Weeks. 50,000 Devices May Still Be Exposed.
Suspected state hackers exploited two Citrix NetScaler zero-days; about 50,000 devices may remain exposed.
Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)
Suspected state-sponsored actors exploited NetScaler zero-day CVE-2026-88772 since early September, affecting dozens of organizations.
Hackers Exploit Citrix NetScaler Zero-Day to Gain Root Access and Deploy Web Shells
Attackers exploit Citrix NetScaler zero-day CVE-2026-88772 for root access and PHP web shells.
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Mass exploitation of NetScaler CVE-2026-88772 grants attackers root access to deploy WHIPSHOT web shells and SLAPSHOT tunneler against government and financial targets.
Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
Actively exploited Citrix NetScaler CVE-2026-88772 is a critical DTLS overflow enabling pre-auth root code execution.
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
Unknown attackers exploited critical Citrix NetScaler zero-days CVE-2026-88771/88772 since early September, deploying custom WHIPSHOT and SLAPSHOT malware for persistence and tunneling.
US, UK warn of exploited Citrix NetScaler zero-day bugs
Agencies warn exploited Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 require immediate patching and forensic triage.
Citrix NetScaler ADC and Gateway Zero-day Vulnerabilities Exploited in Attacks (CVE-2026-88771 & CVE-2026-88772)
CISA says exploited Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 need urgent patching.
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
NCSC warns exploited Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 allow remote compromise.
Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772
Attackers are exploiting critical Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 for unauthenticated remote code execution.
NetScaler admins told to patch critical zero-days in ADC and Gateway now
Citrix and CISA warn NetScaler ADC and Gateway zero-days CVE-2026-88771 and CVE-2026-88772 are under active attack.
CISA Warns of Citrix NetScaler 0-Day RCE Vulnerabilities Exploited in Attacks
CISA added two actively exploited Citrix NetScaler zero-days enabling unauthenticated remote code execution to KEV.
U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
CISA added two actively exploited Citrix NetScaler zero-days to the KEV catalog.
CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
CISA says attackers are globally exploiting critical Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772.
Citrix NetScaler Zero-Days FAQ: CVE-2026-88771 & 88772
Citrix issued emergency patches for eight NetScaler flaws, including zero-days CVE-2026-88771 and CVE-2026-88772.
Citrix Confirms NetScaler Zero-Day RCE Flaws Actively Exploited in Attacks
Citrix confirms two critical NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, are actively exploited for remote code execution.
Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day
Citrix confirmed exploited NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 allow unauthenticated remote code execution.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added actively exploited Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 to the KEV catalog.