<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-29T13:31:32.492298+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/23b03306-5058-4de6-bc02-a62dd0677563/export</id>
    <title>23b03306-5058-4de6-bc02-a62dd0677563</title>
    <updated>2026-09-29T13:31:32.522842+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "23b03306-5058-4de6-bc02-a62dd0677563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mwnrhcfxfc2a", "content": "Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited\nin the Wild\nunit42.paloaltonetworks.com/netscaler-ze...", "creation_timestamp": "2026-09-29T11:55:18.127788Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/23b03306-5058-4de6-bc02-a62dd0677563/export"/>
    <published>2026-09-29T11:55:18.127788+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4f32ef2a-cadb-45ae-9035-7c58d2ce12a5/export</id>
    <title>4f32ef2a-cadb-45ae-9035-7c58d2ce12a5</title>
    <updated>2026-09-29T13:31:32.524727+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4f32ef2a-cadb-45ae-9035-7c58d2ce12a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mwnmzvqyd22h", "content": "Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) - Help Net Security www.helpnetsecurity.com/2026/09/28/c...", "creation_timestamp": "2026-09-29T10:36:04.390972Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4f32ef2a-cadb-45ae-9035-7c58d2ce12a5/export"/>
    <published>2026-09-29T10:36:04.390972+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b2e9b1ef-3d0b-4c1d-b4a4-889112f45aa6/export</id>
    <title>b2e9b1ef-3d0b-4c1d-b4a4-889112f45aa6</title>
    <updated>2026-09-29T13:31:32.524854+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b2e9b1ef-3d0b-4c1d-b4a4-889112f45aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwnd57ao2227", "content": "\ud83d\udd34 Citrix NetScaler: two zero-days under active attack\nCVE-2026-88771 and CVE-2026-88772 can lead to RCE on vulnerable NetScaler ADC/Gateway systems. Both are rated CVSS 9.5 and added to CISA KEV.\n\n#CVE #CVE202688771 #CVE202688772 #Citrix #NetScaler #CyberSecurity", "creation_timestamp": "2026-09-29T07:38:59.617666Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b2e9b1ef-3d0b-4c1d-b4a4-889112f45aa6/export"/>
    <published>2026-09-29T07:38:59.617666+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/77539f0c-2b43-48b5-8a69-cefac5208dd7/export</id>
    <title>77539f0c-2b43-48b5-8a69-cefac5208dd7</title>
    <updated>2026-09-29T13:31:32.524959+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "77539f0c-2b43-48b5-8a69-cefac5208dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwnd2mz43c27", "content": "\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u043e\u0446 \u0441\u0435\u0442\u0435\u0439\n\ud83d\udd34 Citrix NetScaler: two zero-days under active attack\n\nCVE-2026-88771 and CVE-2026-88772 can lead to RCE on vulnerable NetScaler ADC/Gateway systems. Both are rated CVSS 9.5 and added to CISA KEV.\n\n#CVE #CVE202688771 #CVE202688772 #Citrix #NetScaler #CyberSecurity", "creation_timestamp": "2026-09-29T07:37:33.011899Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/77539f0c-2b43-48b5-8a69-cefac5208dd7/export"/>
    <published>2026-09-29T07:37:33.011899+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/22afcdd7-d208-4a52-9b70-9c04c018d86d/export</id>
    <title>22afcdd7-d208-4a52-9b70-9c04c018d86d</title>
    <updated>2026-09-29T13:31:32.525059+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "22afcdd7-d208-4a52-9b70-9c04c018d86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwncjvfjuk2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-88771: 73 interactions\nCVE-2026-88772: 61 interactions\nCVE-2026-87902: 44 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-88771: 20 interactions\nCVE-2026-88772: 13 interactions\nCVE-2026-82384: 6 interactions\n", "creation_timestamp": "2026-09-29T07:28:07.788904Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/22afcdd7-d208-4a52-9b70-9c04c018d86d/export"/>
    <published>2026-09-29T07:28:07.788904+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9895ffb8-771a-4236-8ffd-4a67397fb005/export</id>
    <title>9895ffb8-771a-4236-8ffd-4a67397fb005</title>
    <updated>2026-09-29T13:31:32.525159+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9895ffb8-771a-4236-8ffd-4a67397fb005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwnbt4vvtu27", "content": "Citrix confirmed active exploitation of two NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, after nearly two days of unofficial warnings. The flaws can enable remote code execution. #Citrix #NetScaler #CISA", "creation_timestamp": "2026-09-29T07:15:24.940451Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9895ffb8-771a-4236-8ffd-4a67397fb005/export"/>
    <published>2026-09-29T07:15:24.940451+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fd7ee6dc-13f6-4cd4-9c0b-1c0327ea2cbe/export</id>
    <title>fd7ee6dc-13f6-4cd4-9c0b-1c0327ea2cbe</title>
    <updated>2026-09-29T13:31:32.525253+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fd7ee6dc-13f6-4cd4-9c0b-1c0327ea2cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/440", "content": "Citrix NetScaler PreAuth Command Injection\n\nCVE-2026-88771 Improper input validation leading to RCE in a default NetScaler configuration, with no additional product features required.\n\nBlog:\n   \u2022 https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/\n   \u2022 https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-citrix-netscaler-adc-and-gateway-cve-2026-88771-and-cve-2026-88772/\n\nSearch Query:\nZoomEye: app=\"Citrix NetScaler\"\nFOFA: app=\"NetScaler-AAA\"", "creation_timestamp": "2026-09-29T07:11:03.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fd7ee6dc-13f6-4cd4-9c0b-1c0327ea2cbe/export"/>
    <published>2026-09-29T07:11:03+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1a7529b2-435f-474f-86af-c63506454542/export</id>
    <title>1a7529b2-435f-474f-86af-c63506454542</title>
    <updated>2026-09-29T13:31:32.525352+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1a7529b2-435f-474f-86af-c63506454542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwn2uxsf3k2d", "content": "Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)\n\nCitrix has patched eight critical and high-severity vulnerabilities in NetScaler ADC and NetScaler Gateway, two of which (CVE-2026-88771, CVE-2026-88772) have been exploited in zero-day a\u2026\n#hackernews #news", "creation_timestamp": "2026-09-29T05:11:10.405494Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1a7529b2-435f-474f-86af-c63506454542/export"/>
    <published>2026-09-29T05:11:10.405494+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/88366df5-4a80-4be7-9922-f89bbddb0f99/export</id>
    <title>88366df5-4a80-4be7-9922-f89bbddb0f99</title>
    <updated>2026-09-29T13:31:32.525460+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "88366df5-4a80-4be7-9922-f89bbddb0f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwmy7zgrmq23", "content": "Citrix NetScaler \u306eRCE\u30bc\u30ed\u30c7\u30a4\u3001\u4e16\u754c\u898f\u6a21\u3067\u6570\u9031\u9593\u306b\u308f\u305f\u308a\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-88771\u3001CVE-2026-88772\uff09\n\nCitrix\u306f\u3001NetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u30fb\u9ad8severity\u5ea6\u306e\u8106\u5f31\u60278\u4ef6\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u3002\u3046\u30612\u4ef6\uff08CVE-2026-88771\u3001CVE-2026-88772\uff09\u306f\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u3001\u4fb5\u5bb3\u3055\u308c\u305f\u30c7\u30d0\u30a4\u30b9\u306bWeb\u30b7\u30a7\u30eb\u304c\u4ed5\u639b\u3051\u3089\u308c\u3066\u3044\u307e\u3057\u305f", "creation_timestamp": "2026-09-29T04:23:39.846419Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/88366df5-4a80-4be7-9922-f89bbddb0f99/export"/>
    <published>2026-09-29T04:23:39.846419+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bbfc5e97-6170-4b49-914d-c3c98e63e89c/export</id>
    <title>bbfc5e97-6170-4b49-914d-c3c98e63e89c</title>
    <updated>2026-09-29T13:31:32.525564+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bbfc5e97-6170-4b49-914d-c3c98e63e89c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mwmug4oohv25", "content": "The latest update for #BitSight includes \"CVE-2026-88771 and CVE-2026-88772: Two Critical Citrix NetScaler Flaws Under Active Exploitation\" and \"Identity Risk: 5 Access Pathways Emerging Across #ThreatIntelligence\".\n \n#Cybersecurity #RiskManagement https://opsmtrs.com/43KoF0t", "creation_timestamp": "2026-09-29T03:15:29.302883Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bbfc5e97-6170-4b49-914d-c3c98e63e89c/export"/>
    <published>2026-09-29T03:15:29.302883+00:00</published>
  </entry>
</feed>
