Critical zero-days hit Cisco SD-WAN Manager, Citrix NetScaler gateways, and Zimbra mail servers as threat actors seize root access and deploy tunnels while China-nexus espionage cluster UAT-11587 breaches Asian agencies.
@inferlume.bsky.social
@inferlume.bsky.socialCritical zero-days hit Cisco SD-WAN Manager, Citrix NetScaler gateways, and Zimbra mail servers as threat actors seize root access and deploy tunnels while China-nexus espionage cluster UAT-11587 breaches Asian agencies.
@webtechkitchen.bsky.socialNetScaler zero-days: exploited for weeks before anyone noticed. 50k+ gateways exposed. Patching now is changing the locks after someone copied your keys. Go hunt for web shells.
https://webtechkitchen.com/citrix-netscaler-zero-days-front-door-was-open-weeks-911
@thenewoil.orgHackers exploit #Citrix #NetScaler zero-day to deploy web shells
@calimegai.bsky.social⚠️ Deux failles critiques RCE non corrigées exploitables dans #Citrix #NetScaler confirmées le 27 sept. Citrix a publié des correctifs. Impact large, y compris en config par défaut. #CyberSecurity #Automatisation
@thedailytechfeed.comNetScaler exploit CVE-2026-88771/72 grants attackers root & hides web shell in CSS-like URLs. #Citrix #NetScaler #Vulnerability #Cybersecurity #WebShell #ThreatIntel https://thedailytechfeed.com/critical-post-auth-payload-abuses-netscaler-to-create-superuser-web-shell-access/
@hendryadrian.bsky.socialActive exploitation of Citrix NetScaler CVE-2026-88771 enables pre-auth command injection, payload retrieval, reverse shells, privileged account creation, and web-shell deployment. #Citrix #NetScaler #CVE-2026-88771
@securityonline.bsky.socialCVE-2026-88772, a Citrix NetScaler DTLS memory overflow, is exploited in the wild. A watchTowr PoC and full details are now public. Patch NetScaler now.
#Citrix #NetScaler #CVE202688772 #DTLS #watchTowr #KEV #ZeroDay #RCE
@emil.oneI created a small informative website.
pitscaler.com
#citrix #netscaler #pitscaler
@thedailytechfeed.comA DTLS buffer overflow in Citrix NetScaler lets attackers execute code without login via CVE-2026-88772. #CVE2026-88772 #Citrix #NetScaler #Cybersecurity #RemoteCodeExecution https://thedailytechfeed.com/citrix-netscaler-critical-flaw-cve-2026-88772-enables-pre-auth-remote-code-execution/
@stemshop.bsky.social🔴 NetScaler CVE-2026-88772 — attacks go beyond RCE
Attackers are deploying WHIPSHOT web shells and SLAPSHOT tunneling malware, gaining root access and pivoting into internal networks.
stemshop.top/blog/netscal...
#CVE #CVE202688772 #Citrix #NetScaler #WebShell #CyberSecurity
@ahmandonk.bsky.social📰 Hacker Eksploitasi Zero-Day Citrix NetScaler untuk Memasang Web Shell
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/30/zero-day-citrix-netscaler-dieksploitasi-web-shell/
#citrix #cybersecurity #hacking #malware #netscaler #rce #security #vulnerability #webShell #zero-day
@hendryadrian.bsky.socialCitrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 were used to deploy web shells, tunneling malware, and steal credentials in attacks across North America and Europe. #Citrix #NorthAmerica #Europe
@cyfar.ca~Watchtowr~
In-the-wild pre-auth DTLS overflow enables RCE or DoS; patch immediately.
-
IOCs: CVE-2026-88772
-
#CVE-2026-88772 #Citrix #ThreatIntel
@hendryadrian.bsky.socialPublic PoC for CVE-2026-88771 is fueling mass exploitation of internet-facing Citrix NetScaler ADC and Gateway devices, with log poisoning, webshells, and over 100 victim orgs tracked. #Citrix #NetScaler #CVE202688771
@thenewoil.org@thenewoil.org#Citrix confirms two #NetScaler RCE zero-days exploited in attacks
@hendryadrian.bsky.socialMicrosoft reported a Titan JWT flaw exposing 17 trillion analytics rows, Citrix confirmed two exploited NetScaler RCE zero-days, and Cloudflare fixed a cross-tenant Containers bug. #Microsoft #Citrix #Cloudflare
@netsecio.bsky.socialCritical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE
🌐 cyber[.]netsecops[.]io
@robcampbell.bsky.socialCitrix says two critical NetScaler flaws are already being exploited. CVE-2026-88771 affects default configurations and allows unauthenticated command execution. Patch immediately.
@susika512.mastodon.social.ap.brid.gy