https://vulnerability.circl.lu/sightings/feed 2026-09-28T23:33:05.893953+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/40b6505e-8f2f-43ff-aecf-50023b48d8c8/export 2026-09-28T23:33:05.921308+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "40b6505e-8f2f-43ff-aecf-50023b48d8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117351188539743753", "content": "CVE-2026-88771: Detection Artifact Generator for Citrix NetScaler\nGitHub: https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771", "creation_timestamp": "2026-09-28T23:10:32.968373Z"} 2026-09-28T23:10:32.968373+00:00 https://vulnerability.circl.lu/sighting/873cd335-6d10-48df-9c0e-8a85e55361b1/export 2026-09-28T23:33:05.923605+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "873cd335-6d10-48df-9c0e-8a85e55361b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117351138194874333", "content": "citrixInspector: Passively identify Citrix ADC / NetScaler ADC & Gateway builds and check for known vulnerabilities, including CVE-2023-3519, CitrixBleed 2/3, CVE-2026-8452, and KEV-listed CVE-2026-88771/88772.\nGitHub: https://github.com/securekomodo/citrixInspector", "creation_timestamp": "2026-09-28T22:57:45.083008Z"} 2026-09-28T22:57:45.083008+00:00 https://vulnerability.circl.lu/sighting/30cc18ac-d5fe-44d0-89a4-d264d85d00da/export 2026-09-28T23:33:05.923816+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "30cc18ac-d5fe-44d0-89a4-d264d85d00da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88771", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117351107654208046", "content": "Technical write up of the latest Citrix Netscaler incident, which I\u2019m calling PitScaler - you\u2019ll find out why from this: \n https://www.cert.europa.eu/blog/taking-execute-logging-a-bit-too-literally-cve-2026-88771\nYou may notice it matches the hunting hints earlier in this thread. Guess who found it first :annoyingdog: \nIt\u2019s a really interesting vuln scenario. I\u2019m tracking over 100 victim orgs now. Each one has a unique webshell which can\u2019t be scanned for remotely unless you\u2019re the attacker. It\u2019s espionage.", "creation_timestamp": "2026-09-28T22:50:10.832761Z"} 2026-09-28T22:50:10.832761+00:00 https://vulnerability.circl.lu/sighting/cb9c4fb9-3dec-4d1b-81c3-9e48374289a2/export 2026-09-28T23:33:05.923998+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cb9c4fb9-3dec-4d1b-81c3-9e48374289a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwmeq57vlz2x", "content": "Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-28T22:34:45.710649Z"} 2026-09-28T22:34:45.710649+00:00 https://vulnerability.circl.lu/sighting/21ca3904-6463-47e0-9cb7-af1536103199/export 2026-09-28T23:33:05.924163+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "21ca3904-6463-47e0-9cb7-af1536103199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88771", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117351046719662207", "content": "\ud83d\udcf0 Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack\nCritical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/citrix-netscaler-zero-day-vulnerabilities-cve-2026-88771-cve-2026-88772-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-28T22:34:30.164038Z"} 2026-09-28T22:34:30.164038+00:00 https://vulnerability.circl.lu/sighting/1a8e7010-e636-45a1-8921-e026d6435ebf/export 2026-09-28T23:33:05.924325+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1a8e7010-e636-45a1-8921-e026d6435ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwmcdjexto2e", "content": "NetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u306b\u304a\u3051\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\uff08CVE-2026-88771\u3001CVE-2026-88772\u7b49\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 #JPCERT/CC \uff08Sep 28\uff09\n\nwww.jpcert.or.jp/at/2026/at26...", "creation_timestamp": "2026-09-28T21:51:53.913703Z"} 2026-09-28T21:51:53.913703+00:00 https://vulnerability.circl.lu/sighting/34d57470-28ac-4aad-b2af-ff7b4479a813/export 2026-09-28T23:33:05.924475+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "34d57470-28ac-4aad-b2af-ff7b4479a813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwmcd775752s", "content": "NetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\uff08CVE-2026-88771\u3001CVE-2026-88772\u7b49\uff09 #IPA \uff08Sep 28\uff09\n\nwww.ipa.go.jp/security/sec...", "creation_timestamp": "2026-09-28T21:51:43.387579Z"} 2026-09-28T21:51:43.387579+00:00 https://vulnerability.circl.lu/sighting/8ffbb82f-0dbd-4522-9656-c9902897d9a8/export 2026-09-28T23:33:05.924628+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8ffbb82f-0dbd-4522-9656-c9902897d9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mwmbrvgszn2r", "content": "Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771) labs.watchtowr.com/oh-look-the-...", "creation_timestamp": "2026-09-28T21:42:06.386228Z"} 2026-09-28T21:42:06.386228+00:00 https://vulnerability.circl.lu/sighting/59f9d316-4ef6-456a-9bae-73e2c4e4cddc/export 2026-09-28T23:33:05.924750+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "59f9d316-4ef6-456a-9bae-73e2c4e4cddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88771", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/117350840551160210", "content": "Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771) https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/", "creation_timestamp": "2026-09-28T21:42:02.817441Z"} 2026-09-28T21:42:02.817441+00:00 https://vulnerability.circl.lu/sighting/6390198c-76f6-40e6-9f2c-d0e9d600f8d1/export 2026-09-28T23:33:05.924853+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6390198c-76f6-40e6-9f2c-d0e9d600f8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88771", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mwmb4kpvp627", "content": "\ud83d\udce2 Citrix NetScaler : injection de commandes pr\u00e9-auth exploit\u00e9e en zero-day (CVE-2026-88771)\n\nCet article pr\u00e9sente l'analyse technique d\u00e9taill\u00e9e de CVE-2026-88771, une vuln\u00e9rabilit\u00e9 d'injection de commandes pr\u00e9-authentification\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#CitrixNetScaler #ZeroDay #Cyberveille", "creation_timestamp": "2026-09-28T21:30:06.830608Z"} 2026-09-28T21:30:06.830608+00:00