← Back to the boardNews
Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)
Why it’s here: Active in-the-wild exploitation of critical (CVSS 9.5) NetScaler zero-days against US organizations, with detailed threat-actor tooling, is a cybersecurity and national security development that DC policy and federal network defenders need to track.
Trace across the boardItem
Sep 30Palo Alto Unit 42Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)Unit 42 published a threat brief detailing pre-disclosure exploitation of Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 used to drop web shells, plus exposure counts from Cortex Xpanse.1 outletCyber2 linked
Connected
2 links- NewsCVE-2022-27518 exploited in the wild by APT5: everything you need to know | Wiz BlogBoth involve Citrix NetScaler ADC, Citrix
- NewsActive Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)Both involve Palo Alto Networks, Cortex Xpanse
About
- Palo Alto Networks