Section

Research

Threat intelligence and technical research from vendor labs, coordination centers and independent researchers.

5 matching records, 4 with confirmed exploitation.

1. 97
   Threat signal FortiGuard 23d ago

   Citrix NetScaler RCE zero-day Vulnerabilities

   What is the Attack? Threat actors are actively exploiting two critical remote code execution vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting Citrix NetScaler ADC and NetScaler Gateway appliances. Citrix confirmed…

   Exploited CVSS 9.5 EPSS 0.78 Fix available CVE-2026-88771CVE-2026-88772 Citrix Edge / VPN / firewall
2. 92
   Research ThreatLabz 15d ago

   CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability

   IntroductionOn September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution (RCE) vulnerability affecting NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The vulnerability carries a…

   Exploited CVSS 9.8 EPSS 0.82 CVE-2026-88771CVE-2026-107406CVE-2026-75650 Citrix Edge / VPN / firewall
3. 74
   Research Rapid7 12d ago

   Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

   Overview In early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler…

   Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88779CVE-2026-88772 Citrix Rapid7 Edge / VPN / firewall
4. 65
   Research Sophos X-Ops 27d ago

   Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation

   Categories: Threat Research Tags: advisory, vulnerability, Citrix

   Exploited EPSS 0.11 CVE-2026-88779 Citrix Edge / VPN / firewall
5. 47
   Research Cloudflare 12d ago

   Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

   CVE-2026-88771 lets attackers run commands on NetScaler Gateway before anyone signs in. Patching takes time most teams don't have, so the sign-in decision has to move in front of the vulnerable code.

   EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix Edge / VPN / firewall

Same filters as JSON: /api/items?category=research&window=30d&vendor=Citrix&limit=100. RSS for this section: feed.xml.