Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 3h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 6h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 6h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 7h Vulnerability in Sparx Systems Enterprise Architect software · 7h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 7h Vulnerabilities in Slican telephone exchanges · 8h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 11h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 11h Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · 12h Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 3h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 6h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 6h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 7h Vulnerability in Sparx Systems Enterprise Architect software · 7h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 7h Vulnerabilities in Slican telephone exchanges · 8h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 11h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 11h Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · 12h
🛡️
ACyber Sentinel Security Assessment Team
← Back to feed
🇬🇧 English 🇮🇷 فارسی 🇸🇦 العربية 🇷🇺 Русский 🇨🇳 中文 🏛️ Latina
⚠️ Vulnerability Report

CVE-2026-88772

CRITICAL CVSS 9.5 CVSS 4.0 📌 Analyzed

CVE-2026-88772 - Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - [Actively Exploited]

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

Published: Sep 27, 2026 17:16

Last Modified: Sep 28, 2026 12:26

More from CVE-2026-88772

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Flor...

📰 The Hacker News 🕐 6d
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives a...

📰 The Hacker News 🕐 6d
Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices...

📰 The Hacker News 🕐 6d
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilitie...

📰 The Hacker News 🕐 6d
Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every targe...

📰 The Hacker News 🕐 6d
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote...

📰 The Hacker News 🕐 6d
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and...

📰 The Hacker News 🕐 Oct 08
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaw...

📰 The Hacker News 🕐 Oct 08
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and re...

📰 The Hacker News 🕐 Oct 07
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's networ...

📰 The Hacker News 🕐 Oct 07
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker r...

📰 The Hacker News 🕐 Oct 07
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow acces...

📰 The Hacker News 🕐 Oct 07
Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligen...

📰 The Hacker News 🕐 Oct 07
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and ...

📰 The Hacker News 🕐 Oct 06
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researcher...

📰 The Hacker News 🕐 Oct 06
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specif...

📰 The Hacker News 🕐 Oct 06
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led ...

📰 The Hacker News 🕐 Oct 06
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cach...

📰 The Hacker News 🕐 Oct 06
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacke...

📰 The Hacker News 🕐 Oct 05
CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

A new Citrix NetScaler zero-day has moved quickly from discovery to active exploitation. CVE-2026-88779 affects NetScaler ADC and NetScaler ...

📰 TheCyberThrone 🕐 Oct 05
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software developmen...

📰 The Hacker News 🕐 Oct 05
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vu...

📰 The Hacker News 🕐 Oct 05
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited...

📰 The Hacker News 🕐 Oct 05
Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

5 Min ReadOn Sept. 24, threat detection firm GreyNoise Intelligence observed a single US-based IP address scanning for Citrix NetScaler inst...

📰 Dark Reading 🕐 Oct 02
Finse organisaties gehackt via Citrix-lekken meldt Finse overheid

Finse organisaties gehackt via Citrix-lekken meldt Finse overheid

Meerdere organisaties in Finland zijn via kwetsbaarheden in Citrix NetScaler gehackt, zo heeft de Finse overheid gisterenavond bekendgemaakt...

📰 security.nl 🕐 Oct 02
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail t...

📰 The Hacker News 🕐 Oct 02
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetSca...

📰 The Hacker News 🕐 Oct 01
How the Citrix NetScaler Zero-Days Are Actually Being Exploited

How the Citrix NetScaler Zero-Days Are Actually Being Exploited

The story around the Citrix NetScaler zero-days has become much clearer over the last few days.Threat Intelligence PlatformInitially, we kne...

📰 TheCyberThrone 🕐 Sep 30
Staatssecretaris: Rijksoverheid mogelijk gehackt via Citrix-lekken

Staatssecretaris: Rijksoverheid mogelijk gehackt via Citrix-lekken

Meerdere Rijksoverheidspartijen zijn mogelijk gehackt via kwetsbaarheden in Citrix NetScaler, zo heeft staatssecretaris Van der Burg van Bin...

📰 security.nl 🕐 Sep 30
'Citrix-beveiligingslek al sinds begin september misbruikt bij aanvallen'

'Citrix-beveiligingslek al sinds begin september misbruikt bij aanvallen'

Aanvallers maken al zeker sinds begin september misbruik van een kritieke kwetsbaarheid in Citrix NetScaler ADC en NetScaler Gateway waarvoo...

📰 security.nl 🕐 Sep 30
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances t...

📰 The Hacker News 🕐 Sep 30
Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway ...

📰 The Hacker News 🕐 Sep 30
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

Rob Wright,Senior News Director,Dark ReadingSeptember 29, 20264 Min ReadSource: JHVE via ShutterstockCitrix on Sept. 27 disclosed two critic...

📰 Dark Reading 🕐 Sep 29
Onderzoekers melden grootschalig misbruik van kritieke Citrix-lekken

Onderzoekers melden grootschalig misbruik van kritieke Citrix-lekken

Aanvallers maken op grote schaal misbruik van twee kritieke Citrix-kwetsbaarheden, zo melden beveiligingsonderzoekers. Het Amerikaanse cyber...

📰 security.nl 🕐 Sep 29
Patiëntomgevingen ziekenhuizen weer online na Citrix-kwetsbaarheden

Patiëntomgevingen ziekenhuizen weer online na Citrix-kwetsbaarheden

De patiëntomgevingen van verschillende Nederlandse ziekenhuizen zijn weer online nadat die eerder wegens kwetsbaarheden in Citrix offline wa...

📰 security.nl 🕐 Sep 28
CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its ...

📰 The Hacker News 🕐 Sep 28
Citrix NetScaler Zero-Days Exploited in the Wild: CISA Adds Them to KEV

Citrix NetScaler Zero-Days Exploited in the Wild: CISA Adds Them to KEV

Executive SummaryCitrix has confirmed that two NetScaler ADC and NetScaler Gateway zero-day vulnerabilities — CVE-2026-88771 and CVE-2026-88...

📰 TheCyberThrone 🕐 Sep 28