{"uuid": "a6c3f4e2-b3c2-4e9c-917b-9605f08bfc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://gist.github.com/ichintu/1d63d88b130a22aa8e7576cfb85d5791", "content": "On September 28, 2026, threat intelligence highlights multiple critical, publicly disclosed vulnerabilities across widely used platforms and network hardware. **aaPanel BaoTa** (v\u226411.8.0) and **Netcore routers** (NBR200V2/NBR100V2) are affected by several remote OS command injection and authorization bypass flaws (CVSS 8.5\u201310.0), with vendors remaining unresponsive to early notifications. Additional disclosures include a HIGH-severity LFI/SSRF vulnerability in Joomla\u2019s **Modules Anywhere** extension, an RCE in **OpenCode**, and active **Citrix NetScaler** zero-days (CVE-2026-88771/88772) recently added to CISA\u2019s KEV catalog due to real-world exploitation. Organizations should prioritize immediate patching, enforce compensating controls, and monitor for active threat campaigns.", "creation_timestamp": "2026-09-28T08:00:31.000000Z"}