<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 16:29:00 +0000</lastBuildDate>
    <item>
      <title>861d804d-bac0-415f-ae9a-fb3a4c7f0244</title>
      <link>https://vulnerability.circl.lu/sighting/861d804d-bac0-415f-ae9a-fb3a4c7f0244/export</link>
      <description>{"uuid": "861d804d-bac0-415f-ae9a-fb3a4c7f0244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwo7pay5hu2v", "content": "\ud83e\udd16 Citrix NetScaler dual zero-days: CVE-2026-88771 (RCE, CVSS 9.5) and CVE-2026-88772 (memory overflow, RCE/DDoS), both in default configs of NetScaler ADC/Gateway. Exploited in the wild, patched Sept 27.\nhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "creation_timestamp": "2026-09-29T16:10:11.180826Z"}</description>
      <content:encoded>{"uuid": "861d804d-bac0-415f-ae9a-fb3a4c7f0244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwo7pay5hu2v", "content": "\ud83e\udd16 Citrix NetScaler dual zero-days: CVE-2026-88771 (RCE, CVSS 9.5) and CVE-2026-88772 (memory overflow, RCE/DDoS), both in default configs of NetScaler ADC/Gateway. Exploited in the wild, patched Sept 27.\nhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096", "creation_timestamp": "2026-09-29T16:10:11.180826Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/861d804d-bac0-415f-ae9a-fb3a4c7f0244/export</guid>
      <pubDate>Tue, 29 Sep 2026 16:10:11 +0000</pubDate>
    </item>
    <item>
      <title>42409b5c-5ced-4531-a495-b372d2d8efba</title>
      <link>https://vulnerability.circl.lu/sighting/42409b5c-5ced-4531-a495-b372d2d8efba/export</link>
      <description>{"uuid": "42409b5c-5ced-4531-a495-b372d2d8efba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117355005437174759", "content": "We've been continuously updating this post with the latest information\u2014now including details on exploitation of CVE-2026-88772. And all relevant indicators have been added to our MISP feed.\nhttps://ifin.network/t/multiple-citrix-netscaler-0-days-exploited/867\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-09-29T15:23:30.167084Z"}</description>
      <content:encoded>{"uuid": "42409b5c-5ced-4531-a495-b372d2d8efba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117355005437174759", "content": "We've been continuously updating this post with the latest information\u2014now including details on exploitation of CVE-2026-88772. And all relevant indicators have been added to our MISP feed.\nhttps://ifin.network/t/multiple-citrix-netscaler-0-days-exploited/867\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-09-29T15:23:30.167084Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/42409b5c-5ced-4531-a495-b372d2d8efba/export</guid>
      <pubDate>Tue, 29 Sep 2026 15:23:30 +0000</pubDate>
    </item>
    <item>
      <title>a384ca46-81d9-4543-bd68-4f2beee30ed9</title>
      <link>https://vulnerability.circl.lu/sighting/a384ca46-81d9-4543-bd68-4f2beee30ed9/export</link>
      <description>{"uuid": "a384ca46-81d9-4543-bd68-4f2beee30ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88772", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mwo4r6x6zs72", "content": "Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) https://labs.watchtowr.com/here-we-go-again-citrix-netscaler-dtls-preauth-memory-overflow-cve-2026-88772/", "creation_timestamp": "2026-09-29T15:21:33.746930Z"}</description>
      <content:encoded>{"uuid": "a384ca46-81d9-4543-bd68-4f2beee30ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88772", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mwo4r6x6zs72", "content": "Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) https://labs.watchtowr.com/here-we-go-again-citrix-netscaler-dtls-preauth-memory-overflow-cve-2026-88772/", "creation_timestamp": "2026-09-29T15:21:33.746930Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a384ca46-81d9-4543-bd68-4f2beee30ed9/export</guid>
      <pubDate>Tue, 29 Sep 2026 15:21:33 +0000</pubDate>
    </item>
    <item>
      <title>70f42c2a-6c99-41eb-843c-2554e47c54c2</title>
      <link>https://vulnerability.circl.lu/sighting/70f42c2a-6c99-41eb-843c-2554e47c54c2/export</link>
      <description>{"uuid": "70f42c2a-6c99-41eb-843c-2554e47c54c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/ifin-intel.org/post/3mwo4xvozr22d", "content": "We've been continuously updating this post with the latest information\u2014now including details on exploitation of CVE-2026-88772. And all relevant indicators have been added to our MISP feed.\n\nifin.network/t/multi...\n\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-09-29T15:21:15.234841Z"}</description>
      <content:encoded>{"uuid": "70f42c2a-6c99-41eb-843c-2554e47c54c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/ifin-intel.org/post/3mwo4xvozr22d", "content": "We've been continuously updating this post with the latest information\u2014now including details on exploitation of CVE-2026-88772. And all relevant indicators have been added to our MISP feed.\n\nifin.network/t/multi...\n\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-09-29T15:21:15.234841Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/70f42c2a-6c99-41eb-843c-2554e47c54c2/export</guid>
      <pubDate>Tue, 29 Sep 2026 15:21:15 +0000</pubDate>
    </item>
    <item>
      <title>b3ca8ca7-fad2-498f-ba4b-676daf621070</title>
      <link>https://vulnerability.circl.lu/sighting/b3ca8ca7-fad2-498f-ba4b-676daf621070/export</link>
      <description>{"uuid": "b3ca8ca7-fad2-498f-ba4b-676daf621070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88772", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117354824630218380", "content": "New.\nWatchTower: Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) https://labs.watchtowr.com/here-we-go-again-citrix-netscaler-dtls-preauth-memory-overflow-cve-2026-88772/\nYesterday:\nWatchTower: Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771) https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/ #infosec #vulnerability #NetScaler #Citrix", "creation_timestamp": "2026-09-29T14:35:15.024252Z"}</description>
      <content:encoded>{"uuid": "b3ca8ca7-fad2-498f-ba4b-676daf621070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88772", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117354824630218380", "content": "New.\nWatchTower: Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) https://labs.watchtowr.com/here-we-go-again-citrix-netscaler-dtls-preauth-memory-overflow-cve-2026-88772/\nYesterday:\nWatchTower: Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771) https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/ #infosec #vulnerability #NetScaler #Citrix", "creation_timestamp": "2026-09-29T14:35:15.024252Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b3ca8ca7-fad2-498f-ba4b-676daf621070/export</guid>
      <pubDate>Tue, 29 Sep 2026 14:35:15 +0000</pubDate>
    </item>
    <item>
      <title>ba7ec4ec-aeaf-4a00-97d5-213891e63e33</title>
      <link>https://vulnerability.circl.lu/sighting/ba7ec4ec-aeaf-4a00-97d5-213891e63e33/export</link>
      <description>{"uuid": "ba7ec4ec-aeaf-4a00-97d5-213891e63e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117354800209103638", "content": "Citrix shenanigans from @watchTowr \nhttps://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772/blob/main/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772.py", "creation_timestamp": "2026-09-29T14:29:04.868188Z"}</description>
      <content:encoded>{"uuid": "ba7ec4ec-aeaf-4a00-97d5-213891e63e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117354800209103638", "content": "Citrix shenanigans from @watchTowr \nhttps://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772/blob/main/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772.py", "creation_timestamp": "2026-09-29T14:29:04.868188Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ba7ec4ec-aeaf-4a00-97d5-213891e63e33/export</guid>
      <pubDate>Tue, 29 Sep 2026 14:29:04 +0000</pubDate>
    </item>
    <item>
      <title>221655bd-8e84-4583-8d26-779c49b2b232</title>
      <link>https://vulnerability.circl.lu/sighting/221655bd-8e84-4583-8d26-779c49b2b232/export</link>
      <description>{"uuid": "221655bd-8e84-4583-8d26-779c49b2b232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mwnzshlwrg2a", "content": "Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) - watchTowr Labs", "creation_timestamp": "2026-09-29T14:24:31.541584Z"}</description>
      <content:encoded>{"uuid": "221655bd-8e84-4583-8d26-779c49b2b232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mwnzshlwrg2a", "content": "Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) - watchTowr Labs", "creation_timestamp": "2026-09-29T14:24:31.541584Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/221655bd-8e84-4583-8d26-779c49b2b232/export</guid>
      <pubDate>Tue, 29 Sep 2026 14:24:31 +0000</pubDate>
    </item>
    <item>
      <title>c2974168-660e-499c-922c-c28894131612</title>
      <link>https://vulnerability.circl.lu/sighting/c2974168-660e-499c-922c-c28894131612/export</link>
      <description>{"uuid": "c2974168-660e-499c-922c-c28894131612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mwnymsyacr2s", "content": "Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) - watchTowr Labs", "creation_timestamp": "2026-09-29T14:03:29.020892Z"}</description>
      <content:encoded>{"uuid": "c2974168-660e-499c-922c-c28894131612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mwnymsyacr2s", "content": "Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) - watchTowr Labs", "creation_timestamp": "2026-09-29T14:03:29.020892Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c2974168-660e-499c-922c-c28894131612/export</guid>
      <pubDate>Tue, 29 Sep 2026 14:03:29 +0000</pubDate>
    </item>
    <item>
      <title>f70de990-c8bf-417c-b94e-4e2875713ffc</title>
      <link>https://vulnerability.circl.lu/sighting/f70de990-c8bf-417c-b94e-4e2875713ffc/export</link>
      <description>{"uuid": "f70de990-c8bf-417c-b94e-4e2875713ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwnyij7o4z2x", "content": "Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-29T14:01:03.856284Z"}</description>
      <content:encoded>{"uuid": "f70de990-c8bf-417c-b94e-4e2875713ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88772", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwnyij7o4z2x", "content": "Critical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-29T14:01:03.856284Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f70de990-c8bf-417c-b94e-4e2875713ffc/export</guid>
      <pubDate>Tue, 29 Sep 2026 14:01:03 +0000</pubDate>
    </item>
    <item>
      <title>cff24ecd-4949-487f-9590-bb7e915ed02f</title>
      <link>https://vulnerability.circl.lu/sighting/cff24ecd-4949-487f-9590-bb7e915ed02f/export</link>
      <description>{"uuid": "cff24ecd-4949-487f-9590-bb7e915ed02f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88772", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117354688304468536", "content": "\ud83d\udcf0 Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack\nCritical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/citrix-netscaler-zero-day-vulnerabilities-cve-2026-88771-cve-2026-88772-actively-exploited/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-29T14:00:35.608594Z"}</description>
      <content:encoded>{"uuid": "cff24ecd-4949-487f-9590-bb7e915ed02f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88772", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117354688304468536", "content": "\ud83d\udcf0 Citrix Patches Two Critical NetScaler Zero-Days Under Active Attack\nCritical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/citrix-netscaler-zero-day-vulnerabilities-cve-2026-88771-cve-2026-88772-actively-exploited/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-29T14:00:35.608594Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cff24ecd-4949-487f-9590-bb7e915ed02f/export</guid>
      <pubDate>Tue, 29 Sep 2026 14:00:35 +0000</pubDate>
    </item>
  </channel>
</rss>
