https://vulnerability.circl.lu/sightings/feed 2026-09-28T19:42:23.837738+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d5f027a5-d343-4fe2-8322-d041b97db08f/export 2026-09-28T19:42:23.869332+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d5f027a5-d343-4fe2-8322-d041b97db08f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwlu3am7722d", "content": "Citrix confirms two NetScaler RCE zero-days exploited in attacks\n\nCitrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix t\u2026\n#hackernews #news", "creation_timestamp": "2026-09-28T17:36:44.872739Z"} 2026-09-28T17:36:44.872739+00:00 https://vulnerability.circl.lu/sighting/b1b5c0e2-5110-4cb7-aabb-92a372a68374/export 2026-09-28T19:42:23.872716+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b1b5c0e2-5110-4cb7-aabb-92a372a68374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/365tipu.cz/post/3mwlsnpsdvz2f", "content": "Citrix nouzov\u011b opravil NetScaler ADC a Gateway po potvrzen\u00ed aktivn\u00edho zneu\u017e\u00edv\u00e1n\u00ed chyb CVE-2026-88771 a CVE-2026-88772 (CVSS 9,5), umo\u017e\u0148uj\u00edc\u00edch vzd\u00e1len\u00e9 spu\u0161t\u011bn\u00ed k\u00f3du; doporu\u010duje okam\u017eitou aktualizaci.", "creation_timestamp": "2026-09-28T17:11:17.098388Z"} 2026-09-28T17:11:17.098388+00:00 https://vulnerability.circl.lu/sighting/eeb67a08-3f05-40a7-a629-239dc6d22d6e/export 2026-09-28T19:42:23.872962+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "eeb67a08-3f05-40a7-a629-239dc6d22d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mwlskfdoo72n", "content": "CVE-2026-88771 and CVE-2026-88772: Critical Citrix NetScaler Zero\n\nThis article heavily emphasizes that exploitation is confirmed but downplays the lack of specific Indicators of Compromise, suggesting organizations should trust broad advisories over granular threat intelligence. If established \u2026", "creation_timestamp": "2026-09-28T17:09:25.413045Z"} 2026-09-28T17:09:25.413045+00:00 https://vulnerability.circl.lu/sighting/bcd0aa37-7ade-4f65-bb40-943907bca18c/export 2026-09-28T19:42:23.873093+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bcd0aa37-7ade-4f65-bb40-943907bca18c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb84583a-1292-444b-a5af-e431e11e44e6", "content": "", "creation_timestamp": "2026-09-28T17:00:55.080439Z"} 2026-09-28T17:00:55.080439+00:00 https://vulnerability.circl.lu/sighting/8928594d-c9ee-477d-bd90-18cbaa65b2ea/export 2026-09-28T19:42:23.873212+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8928594d-c9ee-477d-bd90-18cbaa65b2ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwlp32wvzz2z", "content": "~Cybergcca~\nCISA added two Citrix NetScaler CVEs to KEV; apply updates.\n-\nIOCs: CVE-2026-88771, CVE-2026-88772\n-\n#CVE202688771 #Citrix #ThreatIntel", "creation_timestamp": "2026-09-28T16:07:09.566710Z"} 2026-09-28T16:07:09.566710+00:00 https://vulnerability.circl.lu/sighting/dd3bf312-a5cc-4f6d-a29f-f9990316b2ce/export 2026-09-28T19:42:23.873331+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dd3bf312-a5cc-4f6d-a29f-f9990316b2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/ian-bishop.bsky.social/post/3mwlnhgxwd22j", "content": "Citrix just confirmed two critical NetScaler RCE zero-days (CVE-2026-88771 & CVE-2026-88772) are being exploited in the wild. CISA added them to KEV with a Sept 30 deadline for feds. If you run NetScaler ADC/Gateway \u2014 patch to 14.1-73.37 / 13.1-64.23 now.\nsecnewsheadlines.com/p/citrix-net...", "creation_timestamp": "2026-09-28T15:38:19.125958Z"} 2026-09-28T15:38:19.125958+00:00 https://vulnerability.circl.lu/sighting/cb41302d-97a6-4929-bda2-68c5d14d8aad/export 2026-09-28T19:42:23.873489+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cb41302d-97a6-4929-bda2-68c5d14d8aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117349313638958333", "content": "There's various proof of concepts doing the rounds on Github for the new Citrix vulns. All the ones I've seen so far are fake AI slop. \nE.g. this one is AI generated, it's not a PoC, it doesn't exploit, the fingerprint method it uses doesn't exist and as a checker it doesn't actually work either.\nhttps://github.com/murrez/CVE-2026-88772", "creation_timestamp": "2026-09-28T15:13:53.920861Z"} 2026-09-28T15:13:53.920861+00:00 https://vulnerability.circl.lu/sighting/7c27129c-92ef-4f93-831a-ee6b9b844e59/export 2026-09-28T19:42:23.873618+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7c27129c-92ef-4f93-831a-ee6b9b844e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/inferlume.bsky.social/post/3mwll6cqkss25", "content": "Unpatched Citrix NetScaler gateways face active zero-day RCE exploitation under CVE-2026-88771 and CVE-2026-88772, triggering emergency CISA KEV deadlines while ShinyHunters and cloud wipers breach perimeters.\n\nFull Report: inferlume.com/reports/dail...\n\n#NetScaler #ZeroDay #ThreatIntel #CISA #SOC", "creation_timestamp": "2026-09-28T14:57:30.075760Z"} 2026-09-28T14:57:30.075760+00:00 https://vulnerability.circl.lu/sighting/c782fcce-751e-4671-951b-d41a62192786/export 2026-09-28T19:42:23.873732+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c782fcce-751e-4671-951b-d41a62192786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mwlg27rcss25", "content": "Citrix says two critical NetScaler vulnerabilities are being actively exploited.\n\nCVE-2026-88771 enables unauthenticated RCE across all deployments.\n\nCVE-2026-88772 can lead to RCE or DoS where DTLS is enabled.\n\ncyberupdates365.com/citrix-netsc...\n\n#Cybersecurity #Citrix #NetScaler", "creation_timestamp": "2026-09-28T13:25:44.340434Z"} 2026-09-28T13:25:44.340434+00:00 https://vulnerability.circl.lu/sighting/08ebe92a-bdbe-4c8e-83c4-a291a1b4a624/export 2026-09-28T19:42:23.873862+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "08ebe92a-bdbe-4c8e-83c4-a291a1b4a624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117348616624288037", "content": "CISA has added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog. Both are critical, zero-day vulnerabilities that can independently enable remote code execution. CISA has received reports and partner threat intelligence confirming that threat actors are actively exploiting these vulnerabilities globally.\nhttps://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway\n#CISA #KEV #Citrix #zeroday #CVE", "creation_timestamp": "2026-09-28T13:24:41.115767Z"} 2026-09-28T13:24:41.115767+00:00