https://vulnerability.circl.lu/sightings/feed 2026-09-29T14:20:14.672597+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9609c756-fa6c-40e3-9edc-43782f2d6808/export 2026-09-29T14:20:14.709873+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9609c756-fa6c-40e3-9edc-43782f2d6808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwnyij7o4z2x", "content": "Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-29T14:01:03.824728Z"} 2026-09-29T14:01:03.824728+00:00 https://vulnerability.circl.lu/sighting/34ea2353-3f12-4ff1-93e9-f76e3284a75d/export 2026-09-29T14:20:14.711520+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "34ea2353-3f12-4ff1-93e9-f76e3284a75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88771", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117354688304468536", "content": "\ud83d\udcf0 Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack\nCritical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/citrix-netscaler-zero-day-vulnerabilities-cve-2026-88771-cve-2026-88772-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-29T14:00:35.577586Z"} 2026-09-29T14:00:35.577586+00:00 https://vulnerability.circl.lu/sighting/879bd895-e6a3-457c-8913-6adbdd1ac251/export 2026-09-29T14:20:14.711662+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "879bd895-e6a3-457c-8913-6adbdd1ac251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/mgtech.bsky.social/post/3mwnygoin4g2c", "content": "\ud83d\udea8 BREAKING: CVE-2026-88771 and CVE-2026-88772 are rated critical with 9.5 CVSS scores. CVE-2026-88771 allows remote code execution by unauthenticated attackers.\n\nhttps://www.theregister.com/security/2026/09/28/certainties-in-life-death-taxes-and-critical-citrix-vulns-under-attack/5299369", "creation_timestamp": "2026-09-29T14:00:02.108956Z"} 2026-09-29T14:00:02.108956+00:00 https://vulnerability.circl.lu/sighting/dc53b450-7197-41c7-900f-015bed272a85/export 2026-09-29T14:20:14.711767+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dc53b450-7197-41c7-900f-015bed272a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/robcampbell.bsky.social/post/3mwnxknnh2s2d", "content": "Citrix says two critical NetScaler flaws are already being exploited. CVE-2026-88771 affects default configurations and allows unauthenticated command execution. Patch immediately.\n\nsupport.citrix.com/external/art...\n\n#Cybersecurity #NetScaler #Citrix", "creation_timestamp": "2026-09-29T13:44:22.079173Z"} 2026-09-29T13:44:22.079173+00:00 https://vulnerability.circl.lu/sighting/2db453d9-f924-44ad-8b59-51de0e6d5cab/export 2026-09-29T14:20:14.711870+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2db453d9-f924-44ad-8b59-51de0e6d5cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mwnrhcfxfc2a", "content": "Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited\nin the Wild\nunit42.paloaltonetworks.com/netscaler-ze...", "creation_timestamp": "2026-09-29T11:55:18.097831Z"} 2026-09-29T11:55:18.097831+00:00 https://vulnerability.circl.lu/sighting/bfe7410c-ed26-4ba6-aba1-25abcb19000f/export 2026-09-29T14:20:14.711977+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bfe7410c-ed26-4ba6-aba1-25abcb19000f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mwnpmwmtxx2h", "content": "Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771) \u2013 watchTowr\u00a0Labs\n\nGod damn it, we're back in the room again. Yes, that sound in your ears is screaming. The footgun has gone off again, shockingly, and we are yet again dealing with a situation where\u2026", "creation_timestamp": "2026-09-29T11:22:29.596701Z"} 2026-09-29T11:22:29.596701+00:00 https://vulnerability.circl.lu/sighting/169837f1-a0fa-4c5f-ae94-5bf9ff29c859/export 2026-09-29T14:20:14.712087+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "169837f1-a0fa-4c5f-ae94-5bf9ff29c859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mwnmzvqyd22h", "content": "Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) - Help Net Security www.helpnetsecurity.com/2026/09/28/c...", "creation_timestamp": "2026-09-29T10:36:04.361516Z"} 2026-09-29T10:36:04.361516+00:00 https://vulnerability.circl.lu/sighting/3d20ad09-b1d6-4b38-9ce8-447abc88136f/export 2026-09-29T14:20:14.712186+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3d20ad09-b1d6-4b38-9ce8-447abc88136f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://t.me/GithubRedTeam/103737", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a netscaler-ctx697096-checker\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ThomasPoppelgaard\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 09:59:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAm I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771 \u2013 CVE-2026-88778): build, all 8 CVE preconditions, Enhanced ISN, upgrade risks, plus --ioc sweep with every public IoC (webshells, exploit files, log injection, attacker IPs).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-29T10:00:09.000000Z"} 2026-09-29T10:00:09+00:00 https://vulnerability.circl.lu/sighting/f9326900-1c91-404a-ba4f-daf355796039/export 2026-09-29T14:20:14.712291+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f9326900-1c91-404a-ba4f-daf355796039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103737", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a netscaler-ctx697096-checker\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ThomasPoppelgaard\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 09:59:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAm I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771 \u2013 CVE-2026-88778): build, all 8 CVE preconditions, Enhanced ISN, upgrade risks, plus --ioc sweep with every public IoC (webshells, exploit files, log injection, attacker IPs).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-29T10:00:09.000000Z"} 2026-09-29T10:00:09+00:00 https://vulnerability.circl.lu/sighting/6b5ca3e6-e397-444a-a1d4-ed5c2bd9c638/export 2026-09-29T14:20:14.712392+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6b5ca3e6-e397-444a-a1d4-ed5c2bd9c638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mwne2sr6usaf", "content": "NetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066(CVE-2026-88771\u3001CVE-2026-88772\u7b49) | \u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 | IPA \u72ec\u7acb\u884c\u653f\u6cd5\u4eba \u60c5\u5831\u51e6\u7406\u63a8\u9032\u6a5f\u69cb https://www.ipa.go.jp/security/security-alert/2026/alert20260928.html", "creation_timestamp": "2026-09-29T07:55:29.274860Z"} 2026-09-29T07:55:29.274860+00:00