> TritonInfoSec News
Home / Oct 01, 2026 / Story
0
#1 The Hacker News general September 30, 2026 at 05:30 UTC

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

By [email protected] (The Hacker News)

AI Summary

CVE-2026-88772 (CVSS 9.5), a memory overflow in NetScaler's DTLS protocol handling, has been detailed by researchers and is under active exploitation targeting government, financial services, and technology organizations in North America and Europe. The pre-auth path to shellcode execution makes this critical for any org running Citrix NetScaler ADC or Gateway. Security teams should treat unpatched appliances as actively compromised given weeks of undetected exploitation reported by Mandiant.

Read full article → https://thehackernews.com/2026/09/citrix-netscaler…

Relevance score: 92.0/100

# More from October 01

  1. 2
    Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected CyberScoop
  2. 3
    Cisco warns of new SD-WAN zero-day exploited in attacks BleepingComputer
  3. 4
    Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets The Hacker News
  4. 5
    Bitget hacked via zero-day in third-party security products BleepingComputer
  5. 6
    New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses The Hacker News
  6. 7
    Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT The Hacker News
  7. 8
    Alleged ShinyHunters leader arrested in the Netherlands CyberScoop
  8. 9
    Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks SecurityWeek
  9. 10
    Over 543,000 valid credentials exposed in public GitHub repositories BleepingComputer