<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 02:42:01 +0000</lastBuildDate>
    <item>
      <title>ef330102-690a-4335-bfec-5d82d2f16770</title>
      <link>https://vulnerability.circl.lu/sighting/ef330102-690a-4335-bfec-5d82d2f16770/export</link>
      <description>{"uuid": "ef330102-690a-4335-bfec-5d82d2f16770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwmqlvgsvy2l", "content": "\ud83d\udccc CVE-2026-88771 - Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-... https://www.cyberhub.blog/cves/CVE-2026-88771", "creation_timestamp": "2026-09-29T02:07:07.613332Z"}</description>
      <content:encoded>{"uuid": "ef330102-690a-4335-bfec-5d82d2f16770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwmqlvgsvy2l", "content": "\ud83d\udccc CVE-2026-88771 - Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-... https://www.cyberhub.blog/cves/CVE-2026-88771", "creation_timestamp": "2026-09-29T02:07:07.613332Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ef330102-690a-4335-bfec-5d82d2f16770/export</guid>
      <pubDate>Tue, 29 Sep 2026 02:07:07 +0000</pubDate>
    </item>
    <item>
      <title>e3854bf5-c7ee-421a-8602-d5e87f007ef3</title>
      <link>https://vulnerability.circl.lu/sighting/e3854bf5-c7ee-421a-8602-d5e87f007ef3/export</link>
      <description>{"uuid": "e3854bf5-c7ee-421a-8602-d5e87f007ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mwmokgomny2p", "content": "Citrix NetScaler-apparaten getroffen door kritieke zero-day kwetsbaarheden met a\n\nCitrix heeft het grootste deel van het weekend de actieve exploitatie van nieuwe zero-day kwetsbaarheden in NetScaler bevestigd. Deze kwetsbaarheden, ge\u00efdentificeerd als CVE-2026-88771 en CVE-2026-88772, hebben...", "creation_timestamp": "2026-09-29T01:30:32.261800Z"}</description>
      <content:encoded>{"uuid": "e3854bf5-c7ee-421a-8602-d5e87f007ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mwmokgomny2p", "content": "Citrix NetScaler-apparaten getroffen door kritieke zero-day kwetsbaarheden met a\n\nCitrix heeft het grootste deel van het weekend de actieve exploitatie van nieuwe zero-day kwetsbaarheden in NetScaler bevestigd. Deze kwetsbaarheden, ge\u00efdentificeerd als CVE-2026-88771 en CVE-2026-88772, hebben...", "creation_timestamp": "2026-09-29T01:30:32.261800Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e3854bf5-c7ee-421a-8602-d5e87f007ef3/export</guid>
      <pubDate>Tue, 29 Sep 2026 01:30:32 +0000</pubDate>
    </item>
    <item>
      <title>4d236908-7b19-40f4-8299-f66612fe8da2</title>
      <link>https://vulnerability.circl.lu/sighting/4d236908-7b19-40f4-8299-f66612fe8da2/export</link>
      <description>{"uuid": "4d236908-7b19-40f4-8299-f66612fe8da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwmmjwegtr2b", "content": "Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)\uff08Citrix NetScaler\u306eRCE\u30bc\u30ed\u30c7\u30a4\u3001\u6570\u9031\u9593\u306b\u308f\u305f\u308a\u4e16\u754c\u898f\u6a21\u3067\u60aa\u7528\uff09 #HelpNetSecurity (Sep 28)\nwww.helpnetsecurity.com/2026/09/28/c...", "creation_timestamp": "2026-09-29T00:54:26.767105Z"}</description>
      <content:encoded>{"uuid": "4d236908-7b19-40f4-8299-f66612fe8da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwmmjwegtr2b", "content": "Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)\uff08Citrix NetScaler\u306eRCE\u30bc\u30ed\u30c7\u30a4\u3001\u6570\u9031\u9593\u306b\u308f\u305f\u308a\u4e16\u754c\u898f\u6a21\u3067\u60aa\u7528\uff09 #HelpNetSecurity (Sep 28)\nwww.helpnetsecurity.com/2026/09/28/c...", "creation_timestamp": "2026-09-29T00:54:26.767105Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4d236908-7b19-40f4-8299-f66612fe8da2/export</guid>
      <pubDate>Tue, 29 Sep 2026 00:54:26 +0000</pubDate>
    </item>
    <item>
      <title>d62c612c-6597-47e7-902b-96c5973f31e7</title>
      <link>https://vulnerability.circl.lu/sighting/d62c612c-6597-47e7-902b-96c5973f31e7/export</link>
      <description>{"uuid": "d62c612c-6597-47e7-902b-96c5973f31e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mwmkw5appr2f", "content": "Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE\n\nThis article centers heavily on the sheer number of exposed instances identified by Cortex Xpanse rather than providing specific technical details on the exploit chain or mitigation effectiveness against existing configurations. How does \u2026", "creation_timestamp": "2026-09-29T00:25:30.339368Z"}</description>
      <content:encoded>{"uuid": "d62c612c-6597-47e7-902b-96c5973f31e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mwmkw5appr2f", "content": "Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE\n\nThis article centers heavily on the sheer number of exposed instances identified by Cortex Xpanse rather than providing specific technical details on the exploit chain or mitigation effectiveness against existing configurations. How does \u2026", "creation_timestamp": "2026-09-29T00:25:30.339368Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d62c612c-6597-47e7-902b-96c5973f31e7/export</guid>
      <pubDate>Tue, 29 Sep 2026 00:25:30 +0000</pubDate>
    </item>
    <item>
      <title>24e0f67e-6018-4f2e-8515-84f8c050cce0</title>
      <link>https://vulnerability.circl.lu/sighting/24e0f67e-6018-4f2e-8515-84f8c050cce0/export</link>
      <description>{"uuid": "24e0f67e-6018-4f2e-8515-84f8c050cce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mwmimqtog22y", "content": "Citrix NetScaler\u306eCritical \u8106\u5f31\u6027 2\u4ef6\u304c\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306b\u60aa\u7528\u3000CVE-2026-88771\u30fbCVE-2026-88772\u3001\u672a\u8a8d\u8a3cRCE\u306e\u6050\u308c \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-09-28T23:44:28.536225Z"}</description>
      <content:encoded>{"uuid": "24e0f67e-6018-4f2e-8515-84f8c050cce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mwmimqtog22y", "content": "Citrix NetScaler\u306eCritical \u8106\u5f31\u6027 2\u4ef6\u304c\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306b\u60aa\u7528\u3000CVE-2026-88771\u30fbCVE-2026-88772\u3001\u672a\u8a8d\u8a3cRCE\u306e\u6050\u308c \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-09-28T23:44:28.536225Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/24e0f67e-6018-4f2e-8515-84f8c050cce0/export</guid>
      <pubDate>Mon, 28 Sep 2026 23:44:28 +0000</pubDate>
    </item>
    <item>
      <title>40b6505e-8f2f-43ff-aecf-50023b48d8c8</title>
      <link>https://vulnerability.circl.lu/sighting/40b6505e-8f2f-43ff-aecf-50023b48d8c8/export</link>
      <description>{"uuid": "40b6505e-8f2f-43ff-aecf-50023b48d8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117351188539743753", "content": "CVE-2026-88771: Detection Artifact Generator for Citrix NetScaler\nGitHub: https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771", "creation_timestamp": "2026-09-28T23:10:32.968373Z"}</description>
      <content:encoded>{"uuid": "40b6505e-8f2f-43ff-aecf-50023b48d8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117351188539743753", "content": "CVE-2026-88771: Detection Artifact Generator for Citrix NetScaler\nGitHub: https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771", "creation_timestamp": "2026-09-28T23:10:32.968373Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/40b6505e-8f2f-43ff-aecf-50023b48d8c8/export</guid>
      <pubDate>Mon, 28 Sep 2026 23:10:32 +0000</pubDate>
    </item>
    <item>
      <title>873cd335-6d10-48df-9c0e-8a85e55361b1</title>
      <link>https://vulnerability.circl.lu/sighting/873cd335-6d10-48df-9c0e-8a85e55361b1/export</link>
      <description>{"uuid": "873cd335-6d10-48df-9c0e-8a85e55361b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117351138194874333", "content": "citrixInspector: Passively identify Citrix ADC / NetScaler ADC &amp;amp; Gateway builds and check for known vulnerabilities, including CVE-2023-3519, CitrixBleed 2/3, CVE-2026-8452, and KEV-listed CVE-2026-88771/88772.\nGitHub: https://github.com/securekomodo/citrixInspector", "creation_timestamp": "2026-09-28T22:57:45.083008Z"}</description>
      <content:encoded>{"uuid": "873cd335-6d10-48df-9c0e-8a85e55361b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117351138194874333", "content": "citrixInspector: Passively identify Citrix ADC / NetScaler ADC &amp;amp; Gateway builds and check for known vulnerabilities, including CVE-2023-3519, CitrixBleed 2/3, CVE-2026-8452, and KEV-listed CVE-2026-88771/88772.\nGitHub: https://github.com/securekomodo/citrixInspector", "creation_timestamp": "2026-09-28T22:57:45.083008Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/873cd335-6d10-48df-9c0e-8a85e55361b1/export</guid>
      <pubDate>Mon, 28 Sep 2026 22:57:45 +0000</pubDate>
    </item>
    <item>
      <title>30cc18ac-d5fe-44d0-89a4-d264d85d00da</title>
      <link>https://vulnerability.circl.lu/sighting/30cc18ac-d5fe-44d0-89a4-d264d85d00da/export</link>
      <description>{"uuid": "30cc18ac-d5fe-44d0-89a4-d264d85d00da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88771", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117351107654208046", "content": "Technical write up of the latest Citrix Netscaler incident, which I\u2019m calling PitScaler - you\u2019ll find out why from this: \n https://www.cert.europa.eu/blog/taking-execute-logging-a-bit-too-literally-cve-2026-88771\nYou may notice it matches the hunting hints earlier in this thread. Guess who found it first :annoyingdog: \nIt\u2019s a really interesting vuln scenario. I\u2019m tracking over 100 victim orgs now. Each one has a unique webshell which can\u2019t be scanned for remotely unless you\u2019re the attacker. It\u2019s espionage.", "creation_timestamp": "2026-09-28T22:50:10.832761Z"}</description>
      <content:encoded>{"uuid": "30cc18ac-d5fe-44d0-89a4-d264d85d00da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88771", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117351107654208046", "content": "Technical write up of the latest Citrix Netscaler incident, which I\u2019m calling PitScaler - you\u2019ll find out why from this: \n https://www.cert.europa.eu/blog/taking-execute-logging-a-bit-too-literally-cve-2026-88771\nYou may notice it matches the hunting hints earlier in this thread. Guess who found it first :annoyingdog: \nIt\u2019s a really interesting vuln scenario. I\u2019m tracking over 100 victim orgs now. Each one has a unique webshell which can\u2019t be scanned for remotely unless you\u2019re the attacker. It\u2019s espionage.", "creation_timestamp": "2026-09-28T22:50:10.832761Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/30cc18ac-d5fe-44d0-89a4-d264d85d00da/export</guid>
      <pubDate>Mon, 28 Sep 2026 22:50:10 +0000</pubDate>
    </item>
    <item>
      <title>cb9c4fb9-3dec-4d1b-81c3-9e48374289a2</title>
      <link>https://vulnerability.circl.lu/sighting/cb9c4fb9-3dec-4d1b-81c3-9e48374289a2/export</link>
      <description>{"uuid": "cb9c4fb9-3dec-4d1b-81c3-9e48374289a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwmeq57vlz2x", "content": "Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-28T22:34:45.710649Z"}</description>
      <content:encoded>{"uuid": "cb9c4fb9-3dec-4d1b-81c3-9e48374289a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwmeq57vlz2x", "content": "Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-28T22:34:45.710649Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cb9c4fb9-3dec-4d1b-81c3-9e48374289a2/export</guid>
      <pubDate>Mon, 28 Sep 2026 22:34:45 +0000</pubDate>
    </item>
    <item>
      <title>21ca3904-6463-47e0-9cb7-af1536103199</title>
      <link>https://vulnerability.circl.lu/sighting/21ca3904-6463-47e0-9cb7-af1536103199/export</link>
      <description>{"uuid": "21ca3904-6463-47e0-9cb7-af1536103199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88771", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117351046719662207", "content": "\ud83d\udcf0 Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack\nCritical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/citrix-netscaler-zero-day-vulnerabilities-cve-2026-88771-cve-2026-88772-actively-exploited/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-28T22:34:30.164038Z"}</description>
      <content:encoded>{"uuid": "21ca3904-6463-47e0-9cb7-af1536103199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88771", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117351046719662207", "content": "\ud83d\udcf0 Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack\nCritical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/citrix-netscaler-zero-day-vulnerabilities-cve-2026-88771-cve-2026-88772-actively-exploited/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-28T22:34:30.164038Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/21ca3904-6463-47e0-9cb7-af1536103199/export</guid>
      <pubDate>Mon, 28 Sep 2026 22:34:30 +0000</pubDate>
    </item>
  </channel>
</rss>
