{"vulnerability": "cve-2026-88779", "sightings": [{"uuid": "0d750309-022a-42fd-8ae4-ac548bad13af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117380573749192650", "content": "A severe vulnerability was disclosed for Citrix NetScaler ADC and NetScaler Gateway (CVE-2026-88779) https://vuldb.com/vuln/413388", "creation_timestamp": "2026-10-04T03:43:35.494836Z"}, {"uuid": "806cb01f-07ef-47fb-95ff-ae934c62fc1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwzid5pkqx22", "content": "Citrix NetScaler has a new unauthenticated flaw (CVE-2026-88779) that lets a stranger crash the appliance.\n\nIt hits boxes set up for SAML single sign-on, the usual enterprise gateway config.\n\nNo workaround. Patch to 14.1-73.41 now.", "creation_timestamp": "2026-10-04T03:43:41.909701Z"}, {"uuid": "6ca9e6f7-63ab-4533-9032-99e5b7560135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://gist.github.com/ichintu/1d0f62e7f5bbc80cb4372e1a7110c679", "content": "On October 4, 2026, three high-severity vulnerabilities were disclosed:\n\u2022 **CVE-2026-88779 (8.7):** Memory overflow in older NetScaler ADC/Gateway versions, causing Denial of Service.\n\u2022 **CVE-2026-105126 (8.6):** Privilege escalation in LaraDashboard (<1.4.8) allowing admins to gain Superadmin rights, risking account takeover and code execution.\n\u2022 **CVE-2026-105123 (8.8):** Remote Code Execution and arbitrary file manipulation in W CMS (\u22643.18.0) via an unvalidated media upload API.\n\nImmediate patching or version updates are strongly recommended to mitigate these critical risks.", "creation_timestamp": "2026-10-04T04:00:28.000000Z"}, {"uuid": "5886f2a1-4214-4cc0-b019-c4070755ed39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88779", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117380758043847030", "content": "CVE-2026-88779 (HIGH, CVSS 8.7) impacts NetScaler ADC & Gateway <14.1-73.41, <13.1-64.28, <13.1-37.282. Remote, unauthenticated attackers can disrupt availability. Patch required; no active exploits. https://radar.offseq.com/threat/cve-2026-88779-vulnerability-in-netscaler-adc-93f6c6cf8720e4e9 #OffSeq #NetScaler #Vulnerability #InfoSec", "creation_timestamp": "2026-10-04T04:30:27.877338Z"}, {"uuid": "49b680aa-5bbd-4715-bb06-0df8f71b9fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88779", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwzkwtuxrv2j", "content": "Vulnerability CVE-2026-88779 (HIGH, CVSS 8.7) affects NetScaler ADC/Gateway pre-14.1-73.41. Remote attacks possible \u2014 patch now. No active exploits detected. https://radar.offseq.com/threat/cve-2026-88779-vulnerability-in-netscaler-adc-93f6c6cf8720e4e9 #OffSeq #NetScaler #Security", "creation_timestamp": "2026-10-04T04:30:29.554524Z"}, {"uuid": "8f8a28db-b1fa-455a-a298-1fc78b4ad053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/ifin-intel.org/post/3mwzld4jdqk24", "content": "This is the patch that never ends\nIt goes on and on my friends\nSome people\nStarted applying it\nNot knowing what it was\nAnd they will keep applying it\nForever just because\n\n(CVE-2026-88779 advisory and patch included now)\n\nifin.network/t/multi...\n\n#Citrix #Netscaler #ThreatIntel #ThreatIntelligence ", "creation_timestamp": "2026-10-04T04:37:21.044322Z"}, {"uuid": "37f4784e-8c00-4911-8678-e58d9491f993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117380785150306397", "content": "This is the patch that never endsIt goes on and on my friendsSome peopleStarted applying itNot knowing what it wasAnd they will keep applying itForever just because\n(CVE-2026-88779 advisory and patch included now)\nhttps://ifin.network/t/multiple-citrix-netscaler-0-days-exploited/867\n#Citrix #Netscaler #ThreatIntel #ThreatIntelligence", "creation_timestamp": "2026-10-04T04:37:41.017055Z"}, {"uuid": "07127865-07ea-4f7f-afa2-de74f783d86f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwzmpnd4hv2h", "content": "Daily IT Security Digest \u2014 2026-10-04\n[2](https://infosec.exchange/@offseq/117319888106479032), [3](https://hackread.bsky.social/117380646582861631)]\n\n## 3. NetScaler ADC/Gateway High-Severity Vulnerabilities Published\nCVE-2026-88779 (CVSS 8.7) affects NetScaler ADC and Gateway versions below", "creation_timestamp": "2026-10-04T05:02:14.912288Z"}, {"uuid": "250f8fd8-3b49-42f6-a153-805cc2fc12c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5uc4u5osso7wb", "content": "CVE-2026-88779 - Memory overflow vulnerability leading to Denial of Service\nCVE ID : CVE-2026-88779\n \n Published : Oct. 4, 2026, 4:16 a.m. | 48\u00a0minutes ago\n \n Description : Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before...", "creation_timestamp": "2026-10-04T05:54:24.534051Z"}, {"uuid": "0d4d3f59-164a-44a5-bbca-2cc78a3ff44c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-88779", "content": "", "creation_timestamp": "2026-10-03T19:16:43.000000Z"}, {"uuid": "9c892347-9032-4a62-b056-667e76e1cf35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwzxufb22u22", "content": "Citrix NetScaler CVE-2026-88779 is exploited in the wild against NetScaler SAML authentication setups. Upgrade to 14.1-73.41 now.\n\n#Citrix #NetScaler #CVE202688779 #SAML #ActivelyExploited #DoS #Vulnerability", "creation_timestamp": "2026-10-04T08:21:45.405413Z"}, {"uuid": "e8b1dc13-948f-44cd-8aa5-e4ae1f71017a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117382034460841816", "content": "The new Citrix Netscaler vuln from Friday is CVE-2026-88779, patch is out now and they recommend patching as soon as possible: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174\nAlthough the vuln is labeled \u201cMemory overflow vulnerability  leading to Denial of Service\u201d, that\u2019s the same as CVE-2025\u20136543. You may remember that lead to RCE.", "creation_timestamp": "2026-10-04T09:55:24.167712Z"}, {"uuid": "97214f53-424e-48c8-a6b3-14d13b68ddb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://vulnerability.circl.lu/comment/007803cc-3d1a-4c10-8b21-0de3fcce8425", "content": "", "creation_timestamp": "2026-10-04T10:25:17.260775Z"}, {"uuid": "b4dfd420-ed90-4d55-b4fb-15e930c37c33", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a322c452-ef62-4881-96bf-23b1fb7c8b2b", "content": "", "creation_timestamp": "2026-10-04T11:00:01.780145Z"}, {"uuid": "894d2b13-a3ab-42c5-944b-e5321dc79cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://infosec.exchange/users/Sikorsky78/statuses/117382562754489781", "content": "The new Citrix Netscaler vuln from Friday is CVE-2026-88779, patch is out now and they recommend patching as soon as possible: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174\nAlthough the vuln is labeled \u201cMemory overflow vulnerability leading to Denial of Service\u201d, that\u2019s the same as CVE-2025\u20136543. You may remember that lead to RCE in the wild.", "creation_timestamp": "2026-10-04T12:09:25.105572Z"}, {"uuid": "8d6e5f17-1393-4544-bad9-c76f982a09e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-30", "content": "", "creation_timestamp": "2026-09-27T10:21:12.000000Z"}, {"uuid": "d52db0d7-2500-4ec0-9304-356651022f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://nsm.no/fagomrader/digital-sikkerhet/digital-hendelseshandtering/varsler-fra-nsm/sikkerhetsoppdatering-tilgjengelig-for-citrix-netscaler", "content": "", "creation_timestamp": "2026-10-04T05:08:55.000000Z"}, {"uuid": "64b5ed4c-d106-48be-8276-19144a6bfeb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mx35ygijhm2y", "content": "\ud83d\uded1 CVE-2026-88779\nCitrix NetScaler\nCVSS 8.7 / EPSS 0% / KEV: No\nTL;DR: Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-\u2026\nhttps://cvesentinel.com/report/CVE-2026-88779?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-10-04T19:44:04.597650Z"}, {"uuid": "948a2d84-7c42-4716-ae0d-dd44b1e4be5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mx36pofmrs2v", "content": "#Citrix die #Schwachstelle #CVE-2026-88779 im NetScaler ADC und NetScaler Gateway best\u00e4tigt. F\u00fchrt zum Absturz, kann f\u00fcr Denial of Service-Angriffe missbraucht werden. Also patchen.\n\nborncity.com/blog/2026/10...", "creation_timestamp": "2026-10-04T19:57:00.357857Z"}, {"uuid": "c626b789-dea6-4f71-a46a-ad000239fdaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88779", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117384403297195790", "content": "#Citrix die #Schwachstelle #CVE-2026-88779 im NetScaler ADC und NetScaler Gateway best\u00e4tigt. F\u00fchrt zum Absturz, kann f\u00fcr Denial of Service-Angriffe missbraucht werden. Also patchen.\nhttps://borncity.com/blog/2026/10/04/citrix-netscaler-adc-gateway-schwachstelle-cve-2026-88779-patchen/", "creation_timestamp": "2026-10-04T19:57:30.185406Z"}, {"uuid": "f59c0181-5f7d-4291-bf3e-d4bc11a4441b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/927d147d-af17-4c93-a9e6-86641fe38e2c", "content": "", "creation_timestamp": "2026-10-04T20:00:01.877884Z"}, {"uuid": "8e2b39af-cb62-4eff-bffc-512ae3df1567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mx36xprvib2o", "content": "~Cisa~\nCISA reports active exploitation of a Citrix NetScaler memory-buffer vulnerability and urges rapid remediation.\n-\nIOCs: CVE-2026-88779\n-\n#CVE-2026-88779 #Citrix #ThreatIntel", "creation_timestamp": "2026-10-04T20:01:33.373225Z"}, {"uuid": "58d9e9cf-cc65-45d1-ada8-54a3e0ff9852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-citrix-netscaler-1", "content": "", "creation_timestamp": "2026-10-04T10:05:39.000000Z"}, {"uuid": "214f1fab-7053-4dde-9c5e-e4361ecb8e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mx3arvca3j2n", "content": "If you're spending your Sunday night anywhere near a terminal, start with the NetScaler gear. CISA put CVE-2026-88779 on the Known Exploited Vulnerabilities list today, and the federal patch deadline is October 7.\n\n#vulnerability #infosec", "creation_timestamp": "2026-10-04T20:34:05.062225Z"}, {"uuid": "7899c242-fd80-4b93-b2b8-9f82961402d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mx3cavlriv2u", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)\n\n\u26a0\ufe0f CVE-2026-88779 - Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-10-04T21:00:22.442185Z"}, {"uuid": "d93730a6-4cef-4bcb-8434-aff86f92288c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mx3cxl24yq2v", "content": "Breaking: Citrix NetScaler vulnerability CVE-2026-88779\n\u2022 Kindles OpenAI Dots remaster out\n\u2022 Modern Warfare 4 trailer drops\n\u2022 Meta Xiaomi PS5 updates emerge\nWatch the verified two-minute video.", "creation_timestamp": "2026-10-04T21:13:04.212144Z"}, {"uuid": "e5784f10-976b-4319-bce3-e491c6a828d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/cybercod.bsky.social/post/3mx3d3v2ahs2g", "content": "Thanks for the heads-up! CVE-2026-88779 is critical. If you're running NetScaler, prioritize patching this immediately to avoid potential memory-based exploits. Stay safe! #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T21:15:28.138833Z"}, {"uuid": "56e88634-0d4a-4cf5-9b09-0bf99f28ac89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mx3de3kzo22w", "content": "CISA added CVE-2026-88779 to its Known Exploited Vulnerabilities list (2026-10-04).\nCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer\nEPSS today: 0.003 (no score 30 days earlier)\n#infosec #KEV", "creation_timestamp": "2026-10-04T21:20:04.790248Z"}, {"uuid": "9a8e8c53-5463-4efd-8f91-db6ba88dda22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mx3filmfcv2m", "content": "Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution.", "creation_timestamp": "2026-10-04T21:58:22.568998Z"}, {"uuid": "929a9738-a650-468b-91bd-f62cf089d6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx3fsnry3i2w", "content": "Citrix\u3001\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u305fNetScaler\u306eSAML\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nCitrix\u306f\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u305fNetScaler\u306e\u65b0\u305f\u306a\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u8106\u5f31\u6027\u300cCVE-2026-88779\u300d\u306b\u5bfe\u51e6\u3059\u308b\u7dca\u6025\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002\u7814\u7a76\u8005\u3089\u306f\u3001\u3053\u306e\u8106\u5f31\u6027\u304c\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3082\u60aa\u7528\u3067\u304d\u308b\u304b\u3069\u3046\u304b\u3092\u8abf\u3079\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u30e1\u30e2\u30ea\u30d0\u30c3\u30d5\u30a1\u30fc\u306e\u6b20\u9665\u3067\u3001Gateway\u307e\u305f\u306fAAA\u6a5f\u80fd", "creation_timestamp": "2026-10-04T22:04:00.579851Z"}, {"uuid": "c4c8bc98-ce02-47cb-a576-82738eeb1614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117384907878349330", "content": "\ud83d\udea8 Citrix discloses high-severity NetScaler flaw tracked as CVE-2026-88779\u2800CVE-2026-88779 is a memory overflow vulnerability affecting certain customer-managed NetScaler ADC and NetScaler Gateway deployments. Successful exploitation can cause a denial-of-service condition. Citrix assigned it a CVSS v4.0 score of 8.7.\u2800The vulnerability applies when the appliance is configured as either:\u2800\u2022 A SAML Service Provider (SP)\u2022 A SAML Identity Provider (IdP)\u2800Affected versions include NetScaler ADC and Gateway 14.1 before 14.1-73.41 and 13.1 before 13.1-64.28, along with affected FIPS and NDcPP builds. Citrix is urging customers to install the updated releases as soon as possible.\u2800CVE: CVE-2026-88779Severity: HighCVSS v4.0: 8.7Impact: Denial of ServiceCWE: CWE-119\nhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174", "creation_timestamp": "2026-10-04T22:05:49.054892Z"}, {"uuid": "02f8194f-fd68-4e93-aa70-fbf9c2733a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mx3fwwgcv62i", "content": "Citrix patched CVE-2026-88779 in NetScaler ADC and Gateway, a CVSS 8.7 buffer overflow in SAML authentication exploited as a zero-day, per BleepingComputer. Attackers sent usernames containing shell commands to pull payloads. CISA added it to KEV, deadline October 7. bleepingcomputer.com/new...", "creation_timestamp": "2026-10-04T22:06:23.227885Z"}, {"uuid": "a13154d8-487e-4b26-8f28-7d11f2743188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mx3fzem3cq2q", "content": "\ud83e\udd16 CVE-2026-88779 (CVSS 8.7): memory corruption (CWE-119) in Citrix NetScaler ADC/Gateway, unauthenticated network DoS. Exploited as a 0-day, in CISA KEV. Fixes: ADC <14.1-73.41/13.1-64.28, Gateway <14.1-73.41/13.1-64.28\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-88779", "creation_timestamp": "2026-10-04T22:07:44.702865Z"}, {"uuid": "75c6e358-84d2-43f1-b0e0-d3574a15074c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mx3hirj6xp2a", "content": "CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-88779 Citrix NetScaler Improper Restrictio...\n\n\ud83d\udd17 https://www.cisa.gov/news-events/alerts/2026/10/04/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-10-04T22:34:15.230035Z"}, {"uuid": "4ef86a20-a8ee-4588-b412-6d3da4da13f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mx3jlxywfn2c", "content": "Citrix NetScaler CVE-2026-88779 (CVSS 8.7) is exploited as a zero-day on ADC/Gateway configured for SAML, now on CISA KEV. Upgrade to 14.1-73.41 or 13.1-64.28 now. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-04T23:11:50.148105Z"}, {"uuid": "6256058b-ddf4-4f40-b5a5-315c86503efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mx3jnueuoe27", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-88779", "creation_timestamp": "2026-10-04T23:12:53.898134Z"}, {"uuid": "3f0e0c66-3464-4196-9d5c-1e054605d297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mx3lz4ouz52s", "content": "Citrix NetScaler \u306e SAML \u8a8d\u8a3c\u306b\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027 CVE-2026-88779 \u304c\u5b58\u5728\u3002\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u3082\u8abf\u67fb\u4e2d\u3002", "creation_timestamp": "2026-10-04T23:54:58.786965Z"}, {"uuid": "9e3bb16d-ffd6-4bb3-9049-6cf85578c0f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mx3mcibbsp2f", "content": "Patch NetScaler CVE-2026-88779, exploited in attacks. Search typing: fix CTF Loader. File errors: unblock/long paths. NvpwrControl 2.3.0 drops unsigned RTX 50 driver. Members: 29671 ISO/OpenVino upgrade. +9 more stories, 7 new members", "creation_timestamp": "2026-10-05T00:00:14.023283Z"}, {"uuid": "7c106f45-d01b-49b2-810c-52c1315e2174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44753", "content": "CISA Adds One Known Exploited Vulnerability to Catalog \n\nCISA has added one new vulnerability to its\u00a0Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of\u00a0KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s\u00a0KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/10/04/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-10-04T23:00:37.000000Z"}, {"uuid": "7b3ca52b-14b0-462c-ab2e-74dab4961710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44749", "content": "Citrix patches NetScaler SAML zero-day exploited in attacks\n\nCitrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]\nhttps://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/", "creation_timestamp": "2026-10-04T23:00:31.000000Z"}, {"uuid": "06cf3a53-1e8e-490b-ac6d-c58f966b504e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mx3pqahejg2i", "content": "CVE-2026-88779 is trending. Hype score 11, currently #4 on cvemon.\n\nVulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-88779", "creation_timestamp": "2026-10-05T01:01:35.920253Z"}, {"uuid": "16068016-f4e7-489d-966c-c4ae3e21ac8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mx3x3d33ze2q", "content": "NetScaler SAML Authentication Issue: CVE-2026-88779 Exploited in the Wild\uff08NetScaler\u306eSAML\u8a8d\u8a3c\u306b\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3001\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\uff09 #SecurityOnline (Oct 4)\nsecurityonline.info/netscaler-sa...", "creation_timestamp": "2026-10-05T03:13:03.885399Z"}, {"uuid": "aca18df2-7a73-4816-989b-44036af1a633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mx3s6ocoec2m", "content": "Citrix issued emergency fixes for CVE-2026-88779, a NetScaler SAML zero-day exploited in targeted attacks to cause denial of service. CISA added the flaw to its Known Exploited Vulnerabilities catalog. #Citrix #NetScaler #CISA", "creation_timestamp": "2026-10-05T01:45:27.515130Z"}, {"uuid": "8d6119c5-0e1c-4593-acdc-9c9ce5c272f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mx3t5sks6p2v", "content": "Zero-day kwetsbaarheid in NetScaler SAML maakt systemen kwetsbaar voor aanvallen\n\nEen ernstige zero-day kwetsbaarheid, gecodeerd als CVE-2026-88779, is ontdekt in de SAML-component van NetScaler. Deze kwetsbaarheid, een geheugenoverflow (CWE-119), stelt aanvallers in staat om zonder authenti...", "creation_timestamp": "2026-10-05T02:02:52.658316Z"}, {"uuid": "d24198d2-9fa5-466b-9682-2dbcaba68051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/citrix-products-denial-of-service-vulnerability_20261005", "content": "", "creation_timestamp": "2026-10-04T18:00:00.000000Z"}, {"uuid": "5f8d1cee-be0b-4bbb-9f81-996a538d1829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://t.me/BleepingComputer/25718", "content": "\u200aCitrix patches NetScaler SAML zero-day exploited in attacks\n\nCitrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]\n\nhttps://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/", "creation_timestamp": "2026-10-04T22:21:27.000000Z"}, {"uuid": "f5af5913-64eb-4af2-8b24-15090e420765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx44vorok526", "content": "Citrix NetScaler SAML\u306e\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u306e\u30ea\u30e2\u30fc\u30c8DoS\u653b\u6483\u304c\u53ef\u80fd\u306b\n\nCitrix\u306f\u3001NetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u306b\u5b58\u5728\u3059\u308b\u3001\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u30e1\u30e2\u30ea\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u3001\u7dca\u6025\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\u5bfe\u7b56 \u300cCVE-2026-88779\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u8a8d\u8a3c\u3055\u308c\u3066", "creation_timestamp": "2026-10-05T04:57:17.626280Z"}, {"uuid": "5fbe475b-2707-4599-a8e8-1c2b824991f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "exploited", "source": "https://t.me/BleepingComputer/25718", "content": "\u200aCitrix patches NetScaler SAML zero-day exploited in attacks\n\nCitrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]\n\nhttps://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/", "creation_timestamp": "2026-10-04T22:21:27.000000Z"}, {"uuid": "12ff4087-0097-428e-825e-32d5d33ac9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx45kwre7j2d", "content": "Citrix\u304cNetScaler ADC\u304a\u3088\u3073Gateway\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u8b66\u544a\u3001\u60aa\u7528\u306e\u52d5\u304d\u3082\n\nCitrix\u306f\u3001\u9867\u5ba2\u7ba1\u7406\u578b\u306eNetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u5f71\u97ff\u3059\u308b\u30e1\u30e2\u30ea\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u300cCVE-2026-88779\u300d\u306b\u3064\u3044\u3066\u3001\u91cd\u8981\u5ea6\u306e\u9ad8\u3044\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u30fc\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001SAML\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\uff08SP\uff09\u307e\u305f\u306fSAML ID\u30d7\u30ed", "creation_timestamp": "2026-10-05T05:09:10.146883Z"}, {"uuid": "e919b117-893c-4f71-a65a-7aa3f56c06d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mx46fbojwe2y", "content": "\ud83d\udd34 Exploitation confirm\u00e9e (CISA KEV, ajouts du 04/10) (1)\n\u2022 Citrix NetScaler CVE-2026-88779, CVSS 8.7\nhttps://www.cybowl.eu/cyber/blog_2026-10-04", "creation_timestamp": "2026-10-05T05:23:54.463629Z"}, {"uuid": "5c5f98de-e236-4eae-8ac4-da383b3cfa28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mx46qhjg422y", "content": "\u3010\u7dca\u6025\u3011NetScaler ADC/Gateway \u306b\u8a8d\u8a3c\u306a\u3057\u3067\u6b62\u3081\u3089\u308c\u308b\u8106\u5f31\u6027 CVE-2026-88779\uff08CVSS 8.7\uff09\u3002\u524d\u63d0\u306f SAML SP/IdP \u69cb\u6210\u3067\u30019/27\u306b 14.1-73.37 \u3078\u4e0a\u3052\u305f\u6a5f\u5668\u3082\u5bfe\u8c61\u3067\u3059\u3002\u5bfe\u51e6\u306f 14.1-73.41 / 13.1-64.28 \u4ee5\u964d\u3078\u306e\u66f4\u65b0\u3002\nforsmile.jp/articles/net...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-10-05T05:30:10.837968Z"}, {"uuid": "bdf6d229-f7cf-4898-950e-2a39961e923b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mx46v7xcuszg", "content": "Citrix\u3001\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308bNetScaler SAML\u306e\u30bc\u30ed\u30c7\u30a4\u306b\u30d1\u30c3\u30c1\uff1aCVE-2026-88779 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47909/", "creation_timestamp": "2026-10-05T05:32:48.893575Z"}, {"uuid": "63e9b50d-641d-41b4-838e-6c8262826d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mx46yq4lny2j", "content": "CVE-2026-88779 enables memory overflow in NetScaler SAML configurations, allowing targeted attacks that can cause denial of service and potentially remote code execution.\n", "creation_timestamp": "2026-10-05T05:34:48.766900Z"}, {"uuid": "2c205519-d226-4d88-a7b7-99c3241c4380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88779", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mx475yecxv2z", "content": "\ud83d\udcf0 Citrix Patch Zero-Day NetScaler CVE-2026-88779 yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/05/citrix-netscaler-cve-2026-88779-zero-day-saml/\n\n#cisa #citrix #cybersecurity #keamananSiber #malware #netscaler #vulnerability #zero-day", "creation_timestamp": "2026-10-05T05:37:43.162845Z"}, {"uuid": "8ddc06a4-e9b2-4c61-8be5-6af7052f697c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mx47v7fwfe2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88779: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.2\u2026\nCVSS 8.7 \u00b7 EPSS 0.3% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-88779\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-10-05T05:50:45.469749Z"}, {"uuid": "6dc56fe0-adbe-42fb-9c76-b03c7906e949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mx47wcg5td2d", "content": "Exploitation of Citrix NetScaler Zero\n\nThis article frames CVE-2026-88779 purely as a Denial of Service risk, yet it notes that researchers suggest remote code execution is possible and reports evidence of malware presence on honeypots. If RCE is feasible, how does Citrix's curren\u2026\n\nvia SecurityWeek", "creation_timestamp": "2026-10-05T05:51:19.201139Z"}, {"uuid": "54c2f0a8-61fd-458a-bbdd-1f44f72b2bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mx4a5ysevy2q", "content": "\ud83d\udee1\ufe0f Revue cyber du 5 octobre :\n\n\u2022 Cisco SD-WAN : nouveau zero-day (bypass d'auth) exploit\u00e9 activement\n\u2022 Citrix NetScaler SAML : zero-day CVE-2026-88779 exploit\u00e9, patchs d'urgence\n\u2022 Fortinet FortiMail : CVE-2026-104286 critique exploit\u00e9 en 0-day\n\nhttps://www.bleepingcomputer.com/", "creation_timestamp": "2026-10-05T05:55:37.396172Z"}, {"uuid": "5c1a41bf-7429-4722-b636-3956cf1f2951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mx4c53ho6h2n", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-88779: \u26a0\ufe0f CVE-2026-88779: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.3%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-88779-vulnerability-in-netscaler-adc-and-netscaler", "creation_timestamp": "2026-10-05T06:30:54.850599Z"}, {"uuid": "876350d1-c3d5-4002-ad5a-b14ab9a5f0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mx4cawnvda2n", "content": "Here we go again, as Citrix NetScaler appliances hit poor administrators with new zero-day CVE-2026-88779 just days after two other exploited flaws were patched. Protecting ourselves apparently means endlessly patching the exact same appliances over and over without any peace. It...\n\nRead full story", "creation_timestamp": "2026-10-05T06:33:04.160509Z"}, {"uuid": "7e7986f7-c7d2-49fc-ae85-201ebb8424da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mx4fwaoq6x2e", "content": "Top 3 CVE for last 7 days:\nCVE-2026-88771: 72 interactions\nCVE-2026-88772: 70 interactions\nCVE-2026-104286: 36 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-88779: 23 interactions\nCVE-2026-61500: 4 interactions\nCVE-2026-105123: 3 interactions\n", "creation_timestamp": "2026-10-05T07:38:39.740946Z"}, {"uuid": "c2bc749e-d4eb-4225-8333-82662c6b999e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://t.me/kasperskyb2b/2331", "content": "\u2757\ufe0f \u041d\u043e\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 NetScaler, \u0442\u0435\u043f\u0435\u0440\u044c \u0435\u0449\u0451 \u0438 CVE-2026-88779 \n\n\u041a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0432\u0435\u0436\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Citrix NetScaler ADC \u0438 Citrix NetScaler Gateway, \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0445 PitScaler, \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u0448\u0438\u0440\u043e\u043a\u0438\u0435 \u043a\u0440\u0443\u0433\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u043f\u0430\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 CVE-2026-88771 \u0438 -88772 (CVSS4B 9.5) \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 4 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u043f\u0440\u0438\u0432\u043e\u0434\u044f \u043a \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u043e\u0432 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0441\u0435\u0442\u044c. \u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0440\u0430\u0437\u0438\u043b\u0430 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435, \u0442\u0430\u043a \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 CERT \u0434\u0430\u0436\u0435 \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler \u043e\u0442 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.  \u041f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f CTX697096 (\u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0435\u0449\u0451 6 CVE \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c) 27 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC \u0438 \u0431\u044b\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, TTPs \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0442\u0441\u044f \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \n\n\u0415\u0441\u043b\u0438 \u043f\u0435\u0440\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0434\u0438\u0441\u0446\u0438\u043f\u043b\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439, \u0433\u0434\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0436\u0435\u0440\u0442\u0432\u0435 \u043e\u0442\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u0430\u0440\u0438\u0430\u0446\u0438\u044e \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u0430 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u0447\u0438\u0449\u0430\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445, \u0442\u043e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u043e\u043b\u043d\u0435 \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u044e\u0442 \u043d\u0435\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0430\u0443\u0434\u0430\u0447\u0443. \u0427\u0438\u0441\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043f\u044b\u0442\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0442\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c 2 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 SAML-\u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0435 \u043a DoS \u043d\u0430 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.  \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 CVE-2026-88779 (CVSS4B 8.7) \u0438 \u0434\u043b\u044f \u043d\u0435\u0451 4 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0432\u044b\u0448\u043b\u043e \u0435\u0451 \u043e\u0434\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0412\u0430\u0436\u043d\u043e \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0443\u0442\u044c, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u041f\u041e \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u0432\u0437\u043b\u043e\u043c\u0430. \u041f\u0440\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0438 \u043d\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0437\u0435\u043b, \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c\u044e (HA synchronization), \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0434\u0438\u0441\u043a\u043e\u0432 \u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0447\u0438\u0441\u0442\u044b\u0439 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u0440\u0430\u0437, \u0430 \u043d\u0435 \u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0439.  \u0422\u0430\u043a\u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0440\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043f\u043e\u043b\u043d\u0443\u044e \u0440\u043e\u0442\u0430\u0446\u0438\u044e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 (nsroot, LDAP bind, RADIUS, API-\u043a\u043b\u044e\u0447\u0438, KEK \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b), \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u0447\u0430\u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u043c \u0430\u0443\u0434\u0438\u0442\u043e\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432. \n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0438 IoC: 1, 2, 3, 4.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2026-10-05T07:18:02.000000Z"}, {"uuid": "4e49c835-37b8-471f-8b18-9beeff40d3b0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f9546ed0-8bec-45b1-be2d-83be14550f68", "content": "", "creation_timestamp": "2026-10-05T08:01:05.673321Z"}, {"uuid": "dab6fe3e-ae17-4067-bcc8-728ef9dc397f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mx4h7dinse2f", "content": "NetScaler \u306e SAML \u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3001\u6a19\u7684\u578b\u653b\u6483\u3067\u60aa\u7528\u4e2d\u2014Citrix \u304c CVE-2026-88779 \u3092\u30d1\u30c3\u30c1\n\nCitrix NetScaler \u306e SAML \u6a5f\u80fd\u306b\u5b58\u5728\u3059\u308b CVE-2026-88779 \u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u304c\u6a19\u7684\u578b\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3001SAML \u5bfe\u5fdc\u74b0\u5883\u304cDoS \u653b\u6483\u3092\u53d7\u3051\u3066\u3044\u307e\u3059\u3002Citrix \u304c\u7dca\u6025\u30d1\u30c3\u30c1\u3092\u516c\u958b\u3057\u305f\u305f\u3081\u3001\u5373\u5ea7\u306e\u9069\u7528\u304c\u63a8\u5968\u3055\u308c\u307e\u3059\u3002\n\n#\u30bc\u30ed\u30c7\u30a4 #CVE #\u8106\u5f31\u6027", "creation_timestamp": "2026-10-05T08:01:38.823188Z"}, {"uuid": "458661f1-a7b1-4a3c-a735-9cb53f747cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3mx4hg6zmuavp", "content": "NetScaler zero-day rages post-patch; Keycloak token leaks exposed\n\n\u2022 CVE-2026-88779 bypasses SAML defenses (news/58f5730...)\n\u2022 Keycloak leaks bearer tokens (vulns/CVE-2026-105302)\n\n5 sources verified \u00b7 hackingallthethings.com\n#infosec #threatintel #cybersecurity #Keycloak #ShinyHunters", "creation_timestamp": "2026-10-05T08:05:30.713436Z"}, {"uuid": "fda547f4-3a1e-4cdc-bcbe-b1d912512687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mx4hwrzz2h24", "content": "\ud83e\udd16 CVE-2026-88779 (CVSS 8.7): memory overflow in Citrix NetScaler ADC & Gateway, exploited in zero-day attacks. Can knock SAML deployments offline; RCE potential probed. Emergency patches out.\nhttps://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.html", "creation_timestamp": "2026-10-05T08:14:45.418907Z"}, {"uuid": "f1249bf2-d1f4-4a73-940c-bef3de9dc737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117387473613042889", "content": "New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline\nCitrix has released security updates for CVE-2026-88779, a high-severity (CVSS 8.7) memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that has been exploited in targeted zero-day attacks. Successful exploitation can knock SAML-based deployments offline. Citrix urges administrators to apply the updates immediately. https://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.html", "creation_timestamp": "2026-10-05T08:58:18.815251Z"}, {"uuid": "fd42cf95-abf2-4a4a-94fa-616e1b5092bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mx4kep7qqo26", "content": "New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline\n\nCitrix has released security updates for CVE-2026-88779, a high-severity (CVSS 8.7) memory overflow vulnerability in NetScaler ADC and... https://threatintel.cc/2026/10/05/new-netscaler-zeroday-exploited-in.html", "creation_timestamp": "2026-10-05T08:58:20.295638Z"}, {"uuid": "668798d7-da94-485c-8a67-f1dd03aa18be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "exploited", "source": "https://t.me/kasperskyb2b/2331", "content": "\u2757\ufe0f \u041d\u043e\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 NetScaler, \u0442\u0435\u043f\u0435\u0440\u044c \u0435\u0449\u0451 \u0438 CVE-2026-88779 \n\n\u041a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0432\u0435\u0436\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Citrix NetScaler ADC \u0438 Citrix NetScaler Gateway, \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0445 PitScaler, \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u0448\u0438\u0440\u043e\u043a\u0438\u0435 \u043a\u0440\u0443\u0433\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u043f\u0430\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 CVE-2026-88771 \u0438 -88772 (CVSS4B 9.5) \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 4 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u043f\u0440\u0438\u0432\u043e\u0434\u044f \u043a \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u043e\u0432 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0441\u0435\u0442\u044c. \u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0440\u0430\u0437\u0438\u043b\u0430 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435, \u0442\u0430\u043a \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 CERT \u0434\u0430\u0436\u0435 \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler \u043e\u0442 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.  \u041f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f CTX697096 (\u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0435\u0449\u0451 6 CVE \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c) 27 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC \u0438 \u0431\u044b\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, TTPs \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0442\u0441\u044f \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \n\n\u0415\u0441\u043b\u0438 \u043f\u0435\u0440\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0434\u0438\u0441\u0446\u0438\u043f\u043b\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439, \u0433\u0434\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0436\u0435\u0440\u0442\u0432\u0435 \u043e\u0442\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u0430\u0440\u0438\u0430\u0446\u0438\u044e \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u0430 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u0447\u0438\u0449\u0430\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445, \u0442\u043e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u043e\u043b\u043d\u0435 \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u044e\u0442 \u043d\u0435\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0430\u0443\u0434\u0430\u0447\u0443. \u0427\u0438\u0441\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043f\u044b\u0442\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0442\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c 2 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 SAML-\u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0435 \u043a DoS \u043d\u0430 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.  \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 CVE-2026-88779 (CVSS4B 8.7) \u0438 \u0434\u043b\u044f \u043d\u0435\u0451 4 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0432\u044b\u0448\u043b\u043e \u0435\u0451 \u043e\u0434\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0412\u0430\u0436\u043d\u043e \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0443\u0442\u044c, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u041f\u041e \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u0432\u0437\u043b\u043e\u043c\u0430. \u041f\u0440\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0438 \u043d\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0437\u0435\u043b, \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c\u044e (HA synchronization), \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0434\u0438\u0441\u043a\u043e\u0432 \u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0447\u0438\u0441\u0442\u044b\u0439 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u0440\u0430\u0437, \u0430 \u043d\u0435 \u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0439.  \u0422\u0430\u043a\u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0440\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043f\u043e\u043b\u043d\u0443\u044e \u0440\u043e\u0442\u0430\u0446\u0438\u044e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 (nsroot, LDAP bind, RADIUS, API-\u043a\u043b\u044e\u0447\u0438, KEK \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b), \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u0447\u0430\u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u043c \u0430\u0443\u0434\u0438\u0442\u043e\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432. \n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0438 IoC: 1, 2, 3, 4.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2026-10-05T07:18:02.000000Z"}, {"uuid": "03a9dcbc-42cd-4921-88e9-69e9885fbbf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mx4kpywbh72u", "content": "Citrix released security updates for CVE-2026-88779, a high-severity memory overflow flaw in NetScaler ADC and Gateway exploited in targeted zero-day [\u2026]", "creation_timestamp": "2026-10-05T09:04:39.466623Z"}, {"uuid": "61c3fe76-b051-4d17-9aae-2b11e3931a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://t.me/thehackernews/10234", "content": "\u203c\ufe0f Citrix has patched a new NetScaler zero-day exploited in targeted attacks.\n\nCVE-2026-88779 affects certain SAML-configured deployments & can cause denial-of-service, with repeated triggering potentially leaving services unavailable.\n\nDetails - https://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.html", "creation_timestamp": "2026-10-05T06:42:52.000000Z"}, {"uuid": "ecfe29c6-6efc-4fa8-b520-ae781a966e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117387773319588891", "content": "I need @watchTowr to fact-check me here but I think CVE-2026-88779 is a redux of CVE-2026-8452? At least based on this mitigation Citrix support are giving out, somebody posted it on their blog. https://www.deyda.net/index.php/de/2026/08/28/netscaler-cve-checkliste-updates-sicherheitspruefung-und-incident-response/\nThe 8452 patch locked SAML PrefixList to 512 byte or below string. But I think CVE-2026-8452 may be more than 15 items in PrefixList, space-separated, to trigger a vuln. Assuming Citrix support gave out the right mitigation.", "creation_timestamp": "2026-10-05T10:14:41.243500Z"}, {"uuid": "e3a72685-5ccb-414e-bffb-e18aeaf1cb48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88779", "type": "seen", "source": "https://gist.github.com/alon710/2a1ac2074ae10a8c5c664c8d13c0f492", "content": "# CVE-2026-88779: CVE-2026-88779: Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix NetScaler SAML Authentication Daemon\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-10-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88779\n\n## Summary\nCVE-2026-88779 is a critical vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway affecting systems configured as a SAML Service Provider (SP) or SAML Identity Provider (IdP). An unauthenticated remote attacker can exploit this vulnerability to trigger a buffer overflow in the authentication daemon, resulting in persistent denial of service and appliance crash loops.\n\n## TL;DR\nAn unauthenticated remote buffer overflow vulnerability in Citrix NetScaler's SAML parsing daemon (nsaaad) allows attackers to trigger a persistent, cluster-wide denial of service loop on affected ADC and Gateway appliances.\n\n## Exploit Status: ACTIVE\n\n## Technical Details\n\n- **CWE ID**: CWE-119\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.7 (High)\n- **EPSS Score**: 0.00276\n- **Impact**: Denial of Service / High Availability Failover Loop\n- **Exploit Status**: active\n- **KEV Status**: Listed\n\n## Affected Systems\n\n- Citrix NetScaler ADC\n- Citrix NetScaler Gateway\n- **NetScaler ADC**: < 14.1-73.41 (Fixed in: `14.1-73.41`)\n- **NetScaler Gateway**: < 14.1-73.41 (Fixed in: `14.1-73.41`)\n- **NetScaler ADC**: < 13.1-64.28 (Fixed in: `13.1-64.28`)\n- **NetScaler Gateway**: < 13.1-64.28 (Fixed in: `13.1-64.28`)\n\n## Mitigation\n\n- Apply security patches immediately to NetScaler appliances\n- Deploy temporary responder policies bound to AAA_REQUEST\n- Apply latest Application Firewall signature updates via NetScaler Console\n\n**Remediation Steps:**\n1. Verify if SAML is active using the command 'show authentication samlAction'\n2. If vulnerable, download firmware build 14.1-73.41 or 13.1-64.28\n3. Install the updated firmware according to Citrix deployment guidelines\n4. Verify that the nsaaad daemon is stable and no core dumps are generated\n\n## References\n\n- [Citrix Security Bulletin CTX697174](https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174)\n- [Citrix Tech Zone Security Blog](https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/)\n- [CISA KEV Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779)\n- [Thomas Poppelgaard NetScaler Checker](https://github.com/ThomasPoppelgaard/netscaler-ctx697096-checker)\n- [Orjan Johansen NetScaler Threat Hunt Helper](https://github.com/orjanj/netscaler_threat_hunt_helper)\n- [Technical Background Blog & Remediation Guide](https://www.poppelgaard.com/cve-2026-88771-through-cve-2026-88778-what-you-should-know-and-how-to-fix-your-netscaler-adc-netscaler-gateway)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88779) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-05T10:00:30.000000Z"}, {"uuid": "f9198f07-41ff-45fb-bee1-9c928e44e1e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx4okcfb2q2f", "content": "CISA\u3001\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308bCitrix NetScaler\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u8b66\u544a\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Citrix NetScaler\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u300cCVE-2026-88779\u300d\u306b\u3064\u3044\u3066\u3001\u60aa\u7528\u306e\u8a3c\u62e0\u3092\u78ba\u8a8d\u3057\u305f\u3068\u3057\u3066\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001Citrix NetScaler ADC\uff08\u65e7Citrix", "creation_timestamp": "2026-10-05T10:13:02.972656Z"}, {"uuid": "f983837a-b8cd-4c8e-a7bd-ffd596143278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx4qwq5g4x2i", "content": "CISA\u3001Citrix NetScaler\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u78ba\u8a8d\u3068\u3057\u3066\u8b66\u544a\u3000\u653b\u6483\u304c\u7d99\u7d9a\u4e2d\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Citrix NetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u5f71\u97ff\u3092\u53ca\u307c\u3059\u91cd\u5927\u5ea6\u300c\u9ad8\u300d\u306e\u8106\u5f31\u6027\u300cCVE-2026-88779\u300d\u3092\u3001\u60aa\u7528\u306e\u8a3c\u62e0\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3068\u3057\u3066\u300c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u300d\u306b\u8ffd\u52a0", "creation_timestamp": "2026-10-05T10:55:47.142083Z"}, {"uuid": "b529028b-11f7-4199-b51e-4447e3acb077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/kelvinsecteam.bsky.social/post/3mx4tcw2wpx2o", "content": "CISA has added CVE-2026-88779 to its Known Exploited Vulnerabilities Catalog, citing active exploitation of a high-severity memory buffer flaw in Citrix NetScaler ADC and Gateway appliances. The listing follows reporting from GBHackers regarding ongoing attacks. #CyberSecurity", "creation_timestamp": "2026-10-05T11:38:24.402934Z"}, {"uuid": "12b7e6cb-4ae8-48de-bb04-02d9dd87112f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-996", "content": "", "creation_timestamp": "2026-10-05T04:45:18.000000Z"}, {"uuid": "d811d966-a15b-4e1a-815a-8ea54b9c6b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mx4znvxibs2u", "content": "[1/3] NetScaler ADC/Gateway CVE-2026-88779 (CVSS 8.7): zero-day sfruttato, in CISA KEV dal 4/10, deadline FCEB 7/10. Memory overflow nel flusso SAML; Citrix lo d\u00e0 come DoS, ma su honeypot patchati si vede attivit\u00e0 compatibile con RCE (non confermato). #infosec", "creation_timestamp": "2026-10-05T13:31:55.075910Z"}, {"uuid": "0bee1c58-4cf0-4b53-9140-bed4d3d5e60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mx4znw42rc2u", "content": "[1/3] NetScaler ADC/Gateway CVE-2026-88779 (CVSS 8.7): zero-day sfruttato, in CISA KEV dal 4/10, deadline FCEB 7/10. Memory overflow nel flusso SAML; Citrix lo d\u00e0 come DoS, ma su honeypot patchati si vede attivit\u00e0 compatibile con RCE (non confermato). #infosec", "creation_timestamp": "2026-10-05T13:31:55.970288Z"}, {"uuid": "106b1d8a-e06e-4b83-8ca3-dd3695b7b401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx4zrbc6up2i", "content": "Citrix NetScaler\u3001\u65b0\u305f\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3067\u6a19\u7684\u578b\u653b\u6483\u3092\u53d7\u3051\u308b\n\nCitrix\u306f\u3001\u65b0\u305f\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u305f\u300c\u6a19\u7684\u578b\u653b\u6483\u300d\u304cNetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u306b\u5bfe\u3057\u3066\u78ba\u8a8d\u3055\u308c\u305f\u3068\u3057\u3066\u3001\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u7a81\u304b\u308c\u308b\u3068\u3001\u5229\u7528\u4f01\u696d\u304c\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u306b\u9665\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002 \u6df1\u523b\u5ea6\u300c\u9ad8\u300d\u306e\u8106\u5f31\u6027\u300cCVE-2026-88779\u300d\u306f", "creation_timestamp": "2026-10-05T13:33:47.250908Z"}, {"uuid": "00ffa736-eae3-4f31-b8f6-4ae7292cfb6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mx4znw42rd2u", "content": "[1/3] NetScaler ADC/Gateway CVE-2026-88779 (CVSS 8.7): zero-day sfruttato, in CISA KEV dal 4/10, deadline FCEB 7/10. Memory overflow nel flusso SAML; Citrix lo d\u00e0 come DoS, ma su honeypot patchati si vede attivit\u00e0 compatibile con RCE (non confermato). #infosec", "creation_timestamp": "2026-10-05T13:31:56.876347Z"}, {"uuid": "979d0dfa-2f91-449f-a49d-a97edefaa95c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mx4zymxqw327", "content": "TheCyberMind.co\u2122 Survival Series \u2014Part\u00a04\n\nCISA added CVE-2026-88779 affecting Citrix NetScaler ADC and Gateway to the KEV catalog. This Cyber Mind\u2122 Survival Series article explains why gateway downtime is more than a technical issue \u2014 it is a business continuity and\u2026\n\nhttps://thecybermind.co/3is1", "creation_timestamp": "2026-10-05T13:37:55.086503Z"}, {"uuid": "a21c487c-6345-4659-9921-46853e7a5bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx524khnyy2i", "content": "\ud83d\udd17 CVE : CVE-2026-88779", "creation_timestamp": "2026-10-05T13:40:05.939087Z"}, {"uuid": "484e3bb1-e059-41c8-9bac-91556e8b29aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-8727f951-0951c513f6c535b5", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Citrix NetScaler flaw tracked as CVE-2026-88779 (CVSS score of 8.7), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-88779 is a memory overflow vulnerability in Citrix NetScaler ADC and Gateway [\u2026]U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog - Security Affairs", "creation_timestamp": "2026-10-05T13:49:59.666586Z"}, {"uuid": "617c7328-4f9c-4b25-9be4-0ce57c2b1489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mx52px2hutg2", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Citrix NetScaler flaw tracked as CVE-2026-88779 (CVSS score of 8.7), to its Known [\u2026]", "creation_timestamp": "2026-10-05T13:51:37.665607Z"}, {"uuid": "b8789232-66a0-49fc-b0f6-e4cc3340731d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "exploited", "source": "https://t.me/information_security_channel/56040", "content": "Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier\nhttps://www.securityweek.com/exploitation-of-citrix-netscaler-zero-day-hits-appliances-patched-days-earlier/\n\nCitrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.\nThe post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier (https://www.securityweek.com/exploitation-of-citrix-netscaler-zero-day-hits-appliances-patched-days-earlier/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-10-05T11:15:05.000000Z"}, {"uuid": "7904aa33-64ab-4906-8ccf-1b74156b2ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88779", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mx53flcjih2i", "content": "NetScaler CVE-2026-88779 is under active attack\u2014patch by Oct 7 or mitigate remote access exposure. #NetScaler #CVE2026-88779 #Cybersecurity #Vulnerability #PatchNow #CISA #EdgeSecurity #InfoSec https://thedailytechfeed.com/urgent-patch-alert-netscaler-flaw-cve-2026-88779-actively-attacked/", "creation_timestamp": "2026-10-05T14:03:03.224215Z"}, {"uuid": "2ee60df8-7550-43e1-b80b-4c30aa7e0142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117388754453377891", "content": "\ud83d\udcf0 Citrix Patches Critical NetScaler Zero-Day Under Active Attack\nCitrix patches critical zero-day (CVE-2026-88779) in NetScaler ADC & Gateway under active attack. The flaw can cause DoS & potential RCE. CISA added it to its KEV catalog, mandating federal agencies to patch by Oct 7. #NetScaler #ZeroDay #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-10-05T14:24:06.748781Z"}, {"uuid": "e4c57ba6-7456-434b-a9e1-164e78ce5ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mx54lsavxx24", "content": "Citrix patches critical zero-day (CVE-2026-88779) in NetScaler ADC & Gateway under active attack. The flaw can cause DoS & potential RCE. CISA added it to its KEV catalog, mandating federal agencies to patch by Oct 7. #NetScaler #ZeroDay #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-10-05T14:24:25.928577Z"}, {"uuid": "dc744bc4-86c7-459e-b177-0b7b18fc7e3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx56xb5onn2w", "content": "CISA\u3001\u653b\u6483\u8005\u306b\u3088\u308b\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u505c\u6b62\u3092\u62db\u304f\u65b0\u305f\u306aNetScaler\u8106\u5f31\u6027\u3092\u60aa\u7528\u78ba\u8a8d\u3068\u3057\u3066\u8b66\u544a\uff08CVE-2026-88779\uff09\n\nCISA\u306f\u65e5\u66dc\u65e5\u3001Citrix NetScaler\u306e\u5225\u306e\u8106\u5f31\u6027\u300cCVE-2026-88779\u300d\u3092\u300c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u300d\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u30e1\u30e2\u30ea\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u30d0\u30b0\u3067\u3001\u8106\u5f31\u306aNetScaler ADC\u3084Gateway\u3092\u6a5f\u80fd\u4e0d\u5168\u306b\u9665\u308c\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002 \u30d9\u30f3\u30c0\u30fc\u306f\u58f0\u660e\u3067\u3001\u6b21", "creation_timestamp": "2026-10-05T15:06:37.278863Z"}, {"uuid": "55143202-1244-4b4f-a41f-1a05041042a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://t.me/bdufstecru/3502", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 NetScaler ADC (\u0440\u0430\u043d\u0435\u0435 Citrix ADC) \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 NetScaler Gateway (\u0440\u0430\u043d\u0435\u0435 Citrix Gateway) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-15858\nCVE-2026-88779\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174", "creation_timestamp": "2026-10-05T14:40:03.000000Z"}, {"uuid": "c2e64a74-31d8-449f-9e9c-416f45475196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mx5bgqg4jy27", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-88779 \u2013 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer\u00a0Vulnerability\n\nImmediate CISA KEV threat advisory for CVE-2026-88779 affecting Citrix NetScaler. Includes executive risk\u2026\n\nhttps://thecybermind.co/bl05", "creation_timestamp": "2026-10-05T15:51:05.092986Z"}, {"uuid": "feb06e57-db2a-40f3-995b-6daec5c0215a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mx5bizewbb2h", "content": "(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-88779 \u2013 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer\u00a0Vulnerability\n\nImmediate CISA KEV threat advisory for CVE-2026-88779 affecting Citrix NetScaler. Includes SAML exposure\u2026\n\nhttps://thecybermind.co/0b64", "creation_timestamp": "2026-10-05T15:52:21.275226Z"}, {"uuid": "11d1d92c-2951-4b24-a09a-b5f731765da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mx5bxha4mz2y", "content": "CISA added CVE-2026-88779 to its exploited vulns list after targeted attacks crashed Citrix NetScaler appliances, causing denial of service. The flaw hits on-prem SAML Gateway and AAA deployments. #Citrix #NetScaler #CISA", "creation_timestamp": "2026-10-05T16:00:24.703010Z"}, {"uuid": "66b14ec2-2ba3-4120-8f40-0b50f3183aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mx5ctagioy23", "content": "@sophossecurity.bsky.social\nUnpatched NetScaler appliances face active exploitation causing denial of service.\n-\nIOCs: CVE-2026-88779\n-\n#CVE-2026-88779 #NetScaler #ThreatIntel", "creation_timestamp": "2026-10-05T16:15:57.516874Z"}, {"uuid": "182e0265-895d-49bf-821e-d64eb815b7bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mx5g4dydms2v", "content": "CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)\n\nwww.helpnetsecurity.com/2026/10/05/c...\n\n#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus", "creation_timestamp": "2026-10-05T17:14:45.955172Z"}, {"uuid": "7cfaff49-5ab0-4ff0-ba2a-148a6dfc2303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88779", "type": "seen", "source": "MISP/8561728f-95b4-45be-97b4-a3adfc049ebe", "content": "", "creation_timestamp": "2026-10-05T14:36:15.000000Z"}]}