<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 19:42:27 +0000</lastBuildDate>
    <item>
      <title>d5f027a5-d343-4fe2-8322-d041b97db08f</title>
      <link>https://vulnerability.circl.lu/sighting/d5f027a5-d343-4fe2-8322-d041b97db08f/export</link>
      <description>{"uuid": "d5f027a5-d343-4fe2-8322-d041b97db08f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwlu3am7722d", "content": "Citrix confirms two NetScaler RCE zero-days exploited in attacks\n\nCitrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix t\u2026\n#hackernews #news", "creation_timestamp": "2026-09-28T17:36:44.872739Z"}</description>
      <content:encoded>{"uuid": "d5f027a5-d343-4fe2-8322-d041b97db08f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwlu3am7722d", "content": "Citrix confirms two NetScaler RCE zero-days exploited in attacks\n\nCitrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix t\u2026\n#hackernews #news", "creation_timestamp": "2026-09-28T17:36:44.872739Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d5f027a5-d343-4fe2-8322-d041b97db08f/export</guid>
      <pubDate>Mon, 28 Sep 2026 17:36:44 +0000</pubDate>
    </item>
    <item>
      <title>b1b5c0e2-5110-4cb7-aabb-92a372a68374</title>
      <link>https://vulnerability.circl.lu/sighting/b1b5c0e2-5110-4cb7-aabb-92a372a68374/export</link>
      <description>{"uuid": "b1b5c0e2-5110-4cb7-aabb-92a372a68374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/365tipu.cz/post/3mwlsnpsdvz2f", "content": "Citrix nouzov\u011b opravil NetScaler ADC a Gateway po potvrzen\u00ed aktivn\u00edho zneu\u017e\u00edv\u00e1n\u00ed chyb CVE-2026-88771 a CVE-2026-88772 (CVSS 9,5), umo\u017e\u0148uj\u00edc\u00edch vzd\u00e1len\u00e9 spu\u0161t\u011bn\u00ed k\u00f3du; doporu\u010duje okam\u017eitou aktualizaci.", "creation_timestamp": "2026-09-28T17:11:17.098388Z"}</description>
      <content:encoded>{"uuid": "b1b5c0e2-5110-4cb7-aabb-92a372a68374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/365tipu.cz/post/3mwlsnpsdvz2f", "content": "Citrix nouzov\u011b opravil NetScaler ADC a Gateway po potvrzen\u00ed aktivn\u00edho zneu\u017e\u00edv\u00e1n\u00ed chyb CVE-2026-88771 a CVE-2026-88772 (CVSS 9,5), umo\u017e\u0148uj\u00edc\u00edch vzd\u00e1len\u00e9 spu\u0161t\u011bn\u00ed k\u00f3du; doporu\u010duje okam\u017eitou aktualizaci.", "creation_timestamp": "2026-09-28T17:11:17.098388Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b1b5c0e2-5110-4cb7-aabb-92a372a68374/export</guid>
      <pubDate>Mon, 28 Sep 2026 17:11:17 +0000</pubDate>
    </item>
    <item>
      <title>eeb67a08-3f05-40a7-a629-239dc6d22d6e</title>
      <link>https://vulnerability.circl.lu/sighting/eeb67a08-3f05-40a7-a629-239dc6d22d6e/export</link>
      <description>{"uuid": "eeb67a08-3f05-40a7-a629-239dc6d22d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mwlskfdoo72n", "content": "CVE-2026-88771 and CVE-2026-88772: Critical Citrix NetScaler Zero\n\nThis article heavily emphasizes that exploitation is confirmed but downplays the lack of specific Indicators of Compromise, suggesting organizations should trust broad advisories over granular threat intelligence. If established \u2026", "creation_timestamp": "2026-09-28T17:09:25.413045Z"}</description>
      <content:encoded>{"uuid": "eeb67a08-3f05-40a7-a629-239dc6d22d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mwlskfdoo72n", "content": "CVE-2026-88771 and CVE-2026-88772: Critical Citrix NetScaler Zero\n\nThis article heavily emphasizes that exploitation is confirmed but downplays the lack of specific Indicators of Compromise, suggesting organizations should trust broad advisories over granular threat intelligence. If established \u2026", "creation_timestamp": "2026-09-28T17:09:25.413045Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eeb67a08-3f05-40a7-a629-239dc6d22d6e/export</guid>
      <pubDate>Mon, 28 Sep 2026 17:09:25 +0000</pubDate>
    </item>
    <item>
      <title>bcd0aa37-7ade-4f65-bb40-943907bca18c</title>
      <link>https://vulnerability.circl.lu/sighting/bcd0aa37-7ade-4f65-bb40-943907bca18c/export</link>
      <description>{"uuid": "bcd0aa37-7ade-4f65-bb40-943907bca18c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb84583a-1292-444b-a5af-e431e11e44e6", "content": "", "creation_timestamp": "2026-09-28T17:00:55.080439Z"}</description>
      <content:encoded>{"uuid": "bcd0aa37-7ade-4f65-bb40-943907bca18c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb84583a-1292-444b-a5af-e431e11e44e6", "content": "", "creation_timestamp": "2026-09-28T17:00:55.080439Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bcd0aa37-7ade-4f65-bb40-943907bca18c/export</guid>
      <pubDate>Mon, 28 Sep 2026 17:00:55 +0000</pubDate>
    </item>
    <item>
      <title>8928594d-c9ee-477d-bd90-18cbaa65b2ea</title>
      <link>https://vulnerability.circl.lu/sighting/8928594d-c9ee-477d-bd90-18cbaa65b2ea/export</link>
      <description>{"uuid": "8928594d-c9ee-477d-bd90-18cbaa65b2ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwlp32wvzz2z", "content": "~Cybergcca~\nCISA added two Citrix NetScaler CVEs to KEV; apply updates.\n-\nIOCs: CVE-2026-88771, CVE-2026-88772\n-\n#CVE202688771 #Citrix #ThreatIntel", "creation_timestamp": "2026-09-28T16:07:09.566710Z"}</description>
      <content:encoded>{"uuid": "8928594d-c9ee-477d-bd90-18cbaa65b2ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwlp32wvzz2z", "content": "~Cybergcca~\nCISA added two Citrix NetScaler CVEs to KEV; apply updates.\n-\nIOCs: CVE-2026-88771, CVE-2026-88772\n-\n#CVE202688771 #Citrix #ThreatIntel", "creation_timestamp": "2026-09-28T16:07:09.566710Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8928594d-c9ee-477d-bd90-18cbaa65b2ea/export</guid>
      <pubDate>Mon, 28 Sep 2026 16:07:09 +0000</pubDate>
    </item>
    <item>
      <title>dd3bf312-a5cc-4f6d-a29f-f9990316b2ce</title>
      <link>https://vulnerability.circl.lu/sighting/dd3bf312-a5cc-4f6d-a29f-f9990316b2ce/export</link>
      <description>{"uuid": "dd3bf312-a5cc-4f6d-a29f-f9990316b2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/ian-bishop.bsky.social/post/3mwlnhgxwd22j", "content": "Citrix just confirmed two critical NetScaler RCE zero-days (CVE-2026-88771 &amp;amp; CVE-2026-88772) are being exploited in the wild. CISA added them to KEV with a Sept 30 deadline for feds. If you run NetScaler ADC/Gateway \u2014 patch to 14.1-73.37 / 13.1-64.23 now.\nsecnewsheadlines.com/p/citrix-net...", "creation_timestamp": "2026-09-28T15:38:19.125958Z"}</description>
      <content:encoded>{"uuid": "dd3bf312-a5cc-4f6d-a29f-f9990316b2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/ian-bishop.bsky.social/post/3mwlnhgxwd22j", "content": "Citrix just confirmed two critical NetScaler RCE zero-days (CVE-2026-88771 &amp;amp; CVE-2026-88772) are being exploited in the wild. CISA added them to KEV with a Sept 30 deadline for feds. If you run NetScaler ADC/Gateway \u2014 patch to 14.1-73.37 / 13.1-64.23 now.\nsecnewsheadlines.com/p/citrix-net...", "creation_timestamp": "2026-09-28T15:38:19.125958Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dd3bf312-a5cc-4f6d-a29f-f9990316b2ce/export</guid>
      <pubDate>Mon, 28 Sep 2026 15:38:19 +0000</pubDate>
    </item>
    <item>
      <title>cb41302d-97a6-4929-bda2-68c5d14d8aad</title>
      <link>https://vulnerability.circl.lu/sighting/cb41302d-97a6-4929-bda2-68c5d14d8aad/export</link>
      <description>{"uuid": "cb41302d-97a6-4929-bda2-68c5d14d8aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117349313638958333", "content": "There's various proof of concepts doing the rounds on Github for the new Citrix vulns.  All the ones I've seen so far are fake AI slop.  \nE.g. this one is AI generated, it's not a PoC, it doesn't exploit, the fingerprint method it uses doesn't exist and as a checker it doesn't actually work either.\nhttps://github.com/murrez/CVE-2026-88772", "creation_timestamp": "2026-09-28T15:13:53.920861Z"}</description>
      <content:encoded>{"uuid": "cb41302d-97a6-4929-bda2-68c5d14d8aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117349313638958333", "content": "There's various proof of concepts doing the rounds on Github for the new Citrix vulns.  All the ones I've seen so far are fake AI slop.  \nE.g. this one is AI generated, it's not a PoC, it doesn't exploit, the fingerprint method it uses doesn't exist and as a checker it doesn't actually work either.\nhttps://github.com/murrez/CVE-2026-88772", "creation_timestamp": "2026-09-28T15:13:53.920861Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cb41302d-97a6-4929-bda2-68c5d14d8aad/export</guid>
      <pubDate>Mon, 28 Sep 2026 15:13:53 +0000</pubDate>
    </item>
    <item>
      <title>7c27129c-92ef-4f93-831a-ee6b9b844e59</title>
      <link>https://vulnerability.circl.lu/sighting/7c27129c-92ef-4f93-831a-ee6b9b844e59/export</link>
      <description>{"uuid": "7c27129c-92ef-4f93-831a-ee6b9b844e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/inferlume.bsky.social/post/3mwll6cqkss25", "content": "Unpatched Citrix NetScaler gateways face active zero-day RCE exploitation under CVE-2026-88771 and CVE-2026-88772, triggering emergency CISA KEV deadlines while ShinyHunters and cloud wipers breach perimeters.\n\nFull Report: inferlume.com/reports/dail...\n\n#NetScaler #ZeroDay #ThreatIntel #CISA #SOC", "creation_timestamp": "2026-09-28T14:57:30.075760Z"}</description>
      <content:encoded>{"uuid": "7c27129c-92ef-4f93-831a-ee6b9b844e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/inferlume.bsky.social/post/3mwll6cqkss25", "content": "Unpatched Citrix NetScaler gateways face active zero-day RCE exploitation under CVE-2026-88771 and CVE-2026-88772, triggering emergency CISA KEV deadlines while ShinyHunters and cloud wipers breach perimeters.\n\nFull Report: inferlume.com/reports/dail...\n\n#NetScaler #ZeroDay #ThreatIntel #CISA #SOC", "creation_timestamp": "2026-09-28T14:57:30.075760Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7c27129c-92ef-4f93-831a-ee6b9b844e59/export</guid>
      <pubDate>Mon, 28 Sep 2026 14:57:30 +0000</pubDate>
    </item>
    <item>
      <title>c782fcce-751e-4671-951b-d41a62192786</title>
      <link>https://vulnerability.circl.lu/sighting/c782fcce-751e-4671-951b-d41a62192786/export</link>
      <description>{"uuid": "c782fcce-751e-4671-951b-d41a62192786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mwlg27rcss25", "content": "Citrix says two critical NetScaler vulnerabilities are being actively exploited.\n\nCVE-2026-88771 enables unauthenticated RCE across all deployments.\n\nCVE-2026-88772 can lead to RCE or DoS where DTLS is enabled.\n\ncyberupdates365.com/citrix-netsc...\n\n#Cybersecurity #Citrix #NetScaler", "creation_timestamp": "2026-09-28T13:25:44.340434Z"}</description>
      <content:encoded>{"uuid": "c782fcce-751e-4671-951b-d41a62192786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mwlg27rcss25", "content": "Citrix says two critical NetScaler vulnerabilities are being actively exploited.\n\nCVE-2026-88771 enables unauthenticated RCE across all deployments.\n\nCVE-2026-88772 can lead to RCE or DoS where DTLS is enabled.\n\ncyberupdates365.com/citrix-netsc...\n\n#Cybersecurity #Citrix #NetScaler", "creation_timestamp": "2026-09-28T13:25:44.340434Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c782fcce-751e-4671-951b-d41a62192786/export</guid>
      <pubDate>Mon, 28 Sep 2026 13:25:44 +0000</pubDate>
    </item>
    <item>
      <title>08ebe92a-bdbe-4c8e-83c4-a291a1b4a624</title>
      <link>https://vulnerability.circl.lu/sighting/08ebe92a-bdbe-4c8e-83c4-a291a1b4a624/export</link>
      <description>{"uuid": "08ebe92a-bdbe-4c8e-83c4-a291a1b4a624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117348616624288037", "content": "CISA has added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog. Both are critical, zero-day vulnerabilities that can independently enable remote code execution. CISA has received reports and partner threat intelligence confirming that threat actors are actively exploiting these vulnerabilities globally.\nhttps://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway\n#CISA #KEV #Citrix #zeroday #CVE", "creation_timestamp": "2026-09-28T13:24:41.115767Z"}</description>
      <content:encoded>{"uuid": "08ebe92a-bdbe-4c8e-83c4-a291a1b4a624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117348616624288037", "content": "CISA has added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog. Both are critical, zero-day vulnerabilities that can independently enable remote code execution. CISA has received reports and partner threat intelligence confirming that threat actors are actively exploiting these vulnerabilities globally.\nhttps://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway\n#CISA #KEV #Citrix #zeroday #CVE", "creation_timestamp": "2026-09-28T13:24:41.115767Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/08ebe92a-bdbe-4c8e-83c4-a291a1b4a624/export</guid>
      <pubDate>Mon, 28 Sep 2026 13:24:41 +0000</pubDate>
    </item>
  </channel>
</rss>
