Citrix NetScaler zero-days: pre-auth DTLS overflow to root, then WHIPSHOT web shells. PoC is public. https://intel.threadlinqs.com/threat/TL-2026-3189 #ThreatIntel #CVE_2026_88771 #CVE_2026_88772 #WHIPSHOT

Citrix NetScaler zero-days: pre-auth DTLS overflow to root, then WHIPSHOT web shells. PoC is public. https://intel.threadlinqs.com/threat/TL-2026-3189 #ThreatIntel #CVE_2026_88771 #CVE_2026_88772 #WHIPSHOT
Citrix NetScaler SAML bug crashes gateways - attackers may be using it to speed up RCE. https://intel.threadlinqs.com/threat/TL-2026-2944 #ThreatIntel #CVE_2026_88779 #CVE_2026_88771 #NetScaler
NetScaler's new SAML zero-day is hitting appliances that were patched just days ago. https://intel.threadlinqs.com/threat/TL-2026-2923 #ThreatIntel #CVE_2026_88779 #CVE_2026_88771 #PitScaler
Two unauthenticated NetScaler RCE zero-days are under active exploitation - patching won't undo the damage. https://intel.threadlinqs.com/threat/TL-2026-2711 #ThreatIntel #CVE_2026_88771 #CVE_2026_88772 #NetScaler