Citrix NetScaler zero-days: pre-auth DTLS overflow to root, then WHIPSHOT web shells. PoC is public. https://intel.threadlinqs.com/threat/TL-2026-3189 #ThreatIntel #CVE_2026_88771 #CVE_2026_88772 #WHIPSHOT

Two unauthenticated NetScaler RCE zero-days are under active exploitation - patching won't undo the damage. https://intel.threadlinqs.com/threat/TL-2026-2711 #ThreatIntel #CVE_2026_88771 #CVE_2026_88772 #NetScaler