https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:55:14 +0000 https://vulnerability.circl.lu/sighting/c01b111c-8f09-4317-8df1-35cb8ecc3b72/export {"uuid": "c01b111c-8f09-4317-8df1-35cb8ecc3b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104116", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-88773\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Scyrix-LLC\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-02 20:31:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-88773\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-02T21:00:10.000000Z"} {"uuid": "c01b111c-8f09-4317-8df1-35cb8ecc3b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104116", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-88773\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Scyrix-LLC\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-02 20:31:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-88773\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-02T21:00:10.000000Z"} https://vulnerability.circl.lu/sighting/c01b111c-8f09-4317-8df1-35cb8ecc3b72/export Fri, 02 Oct 2026 21:00:10 +0000 https://vulnerability.circl.lu/sighting/e32d6195-59ce-4fc9-b786-6a2b7271d33a/export {"uuid": "e32d6195-59ce-4fc9-b786-6a2b7271d33a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/en/alerts/critical-vulnerabilities-citrix-netscaler-adc-and-netscaler-gateway-products-several-intrusions-finland", "content": "", "creation_timestamp": "2026-10-01T09:51:44.000000Z"} {"uuid": "e32d6195-59ce-4fc9-b786-6a2b7271d33a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/en/alerts/critical-vulnerabilities-citrix-netscaler-adc-and-netscaler-gateway-products-several-intrusions-finland", "content": "", "creation_timestamp": "2026-10-01T09:51:44.000000Z"} https://vulnerability.circl.lu/sighting/e32d6195-59ce-4fc9-b786-6a2b7271d33a/export Thu, 01 Oct 2026 09:51:44 +0000 https://vulnerability.circl.lu/sighting/6aceed80-35db-49ad-87e3-d04aa7965f42/export {"uuid": "6aceed80-35db-49ad-87e3-d04aa7965f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/varoitukset/citrix-netscaler-adc-ja-gateway-tuotteissa-kriittisia-haavoittuvuuksia-useita-tietomurtoja-suomessa", "content": "", "creation_timestamp": "2026-10-01T02:16:25.000000Z"} {"uuid": "6aceed80-35db-49ad-87e3-d04aa7965f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/varoitukset/citrix-netscaler-adc-ja-gateway-tuotteissa-kriittisia-haavoittuvuuksia-useita-tietomurtoja-suomessa", "content": "", "creation_timestamp": "2026-10-01T02:16:25.000000Z"} https://vulnerability.circl.lu/sighting/6aceed80-35db-49ad-87e3-d04aa7965f42/export Thu, 01 Oct 2026 02:16:25 +0000 https://vulnerability.circl.lu/sighting/fc9f0e58-892a-4ac2-9781-a1e8f6461bc7/export {"uuid": "fc9f0e58-892a-4ac2-9781-a1e8f6461bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://gist.github.com/alon710/8178acb7c07fdcab127104f7b77df5ce", "content": "# CVE-2026-88773: CVE-2026-88773: Critical HTTP Request Smuggling in Citrix NetScaler ADC and Gateway\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-09-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88773\n\n## Summary\nA critical HTTP request/response smuggling vulnerability (CWE-444) exists in Citrix NetScaler ADC and Citrix NetScaler Gateway. This flaw arises from inconsistent request boundary parsing between NetScaler appliances and backend web servers, allowing remote, unauthenticated attackers to bypass security boundaries, access restricted resources, or hijack active user sessions on multiplexed TCP connections.\n\n## TL;DR\nUnauthenticated HTTP request smuggling in Citrix NetScaler allows session hijacking, policy bypass, and cache poisoning due to boundary parsing differences.\n\n## Technical Details\n\n- **CWE ID**: CWE-444\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 10.0 (Critical)\n- **CVSS v4.0 Score**: 9.3 (Critical)\n- **Exploit Status**: None/Theoretical (No public PoC code)\n- **CISA KEV Status**: Not Listed (Related CVEs CVE-2026-88771/2 are listed)\n- **Primary Impact**: Session Hijacking, Security Bypass, Cache Poisoning\n\n## Affected Systems\n\n- Citrix NetScaler ADC (Standard/Enterprise/Platinum)\n- Citrix NetScaler Gateway\n- Citrix NetScaler ADC FIPS\n- Citrix NetScaler ADC NDcPP\n\n## Mitigation\n\n- Upgrade firmware to the latest secure version (14.1-73.37 / 13.1-64.24 or later)\n- Disable TCP multiplexing and keep-alive settings on downstream web servers to prevent socket reuse\n- Configure Web Application Firewalls (WAF) to detect and block contradictory Content-Length and Transfer-Encoding headers\n- Enable Enhanced ISN Generation to mitigate related TCP prediction attacks\n\n**Remediation Steps:**\n1. Identify vulnerable NetScaler appliances and execute configuration checks for active HTTP/SSL virtual servers.\n2. Download the appropriate secure firmware build (14.1-73.37 or 13.1-64.24) from the official Citrix portal.\n3. Apply the firmware update to both standalone nodes or in high-availability (HA) pairs sequentially.\n4. Execute CLI commands on all partitions to enable Enhanced ISN Generation: 'set ns tcpparam -enhancedISNgeneration ENABLED'.\n5. Save the active configuration locally via 'save ns config -all' and reboot the appliance if required.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88773) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-29T07:30:30.000000Z"} {"uuid": "fc9f0e58-892a-4ac2-9781-a1e8f6461bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://gist.github.com/alon710/8178acb7c07fdcab127104f7b77df5ce", "content": "# CVE-2026-88773: CVE-2026-88773: Critical HTTP Request Smuggling in Citrix NetScaler ADC and Gateway\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-09-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88773\n\n## Summary\nA critical HTTP request/response smuggling vulnerability (CWE-444) exists in Citrix NetScaler ADC and Citrix NetScaler Gateway. This flaw arises from inconsistent request boundary parsing between NetScaler appliances and backend web servers, allowing remote, unauthenticated attackers to bypass security boundaries, access restricted resources, or hijack active user sessions on multiplexed TCP connections.\n\n## TL;DR\nUnauthenticated HTTP request smuggling in Citrix NetScaler allows session hijacking, policy bypass, and cache poisoning due to boundary parsing differences.\n\n## Technical Details\n\n- **CWE ID**: CWE-444\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 10.0 (Critical)\n- **CVSS v4.0 Score**: 9.3 (Critical)\n- **Exploit Status**: None/Theoretical (No public PoC code)\n- **CISA KEV Status**: Not Listed (Related CVEs CVE-2026-88771/2 are listed)\n- **Primary Impact**: Session Hijacking, Security Bypass, Cache Poisoning\n\n## Affected Systems\n\n- Citrix NetScaler ADC (Standard/Enterprise/Platinum)\n- Citrix NetScaler Gateway\n- Citrix NetScaler ADC FIPS\n- Citrix NetScaler ADC NDcPP\n\n## Mitigation\n\n- Upgrade firmware to the latest secure version (14.1-73.37 / 13.1-64.24 or later)\n- Disable TCP multiplexing and keep-alive settings on downstream web servers to prevent socket reuse\n- Configure Web Application Firewalls (WAF) to detect and block contradictory Content-Length and Transfer-Encoding headers\n- Enable Enhanced ISN Generation to mitigate related TCP prediction attacks\n\n**Remediation Steps:**\n1. Identify vulnerable NetScaler appliances and execute configuration checks for active HTTP/SSL virtual servers.\n2. Download the appropriate secure firmware build (14.1-73.37 or 13.1-64.24) from the official Citrix portal.\n3. Apply the firmware update to both standalone nodes or in high-availability (HA) pairs sequentially.\n4. Execute CLI commands on all partitions to enable Enhanced ISN Generation: 'set ns tcpparam -enhancedISNgeneration ENABLED'.\n5. Save the active configuration locally via 'save ns config -all' and reboot the appliance if required.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88773) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-29T07:30:30.000000Z"} https://vulnerability.circl.lu/sighting/fc9f0e58-892a-4ac2-9781-a1e8f6461bc7/export Tue, 29 Sep 2026 07:30:30 +0000 https://vulnerability.circl.lu/sighting/57ddd699-20d0-4b6c-ba00-c697cab444b5/export {"uuid": "57ddd699-20d0-4b6c-ba00-c697cab444b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwn5z2f5zn2h", "content": "\ud83d\udccc CVE-2026-88773 - Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\n... https://www.cyberhub.blog/cves/CVE-2026-88773", "creation_timestamp": "2026-09-29T06:07:07.661350Z"} {"uuid": "57ddd699-20d0-4b6c-ba00-c697cab444b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwn5z2f5zn2h", "content": "\ud83d\udccc CVE-2026-88773 - Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\n... https://www.cyberhub.blog/cves/CVE-2026-88773", "creation_timestamp": "2026-09-29T06:07:07.661350Z"} https://vulnerability.circl.lu/sighting/57ddd699-20d0-4b6c-ba00-c697cab444b5/export Tue, 29 Sep 2026 06:07:07 +0000 https://vulnerability.circl.lu/sighting/cbc7d82a-efa6-4f17-abc6-c4d12e6307c5/export {"uuid": "cbc7d82a-efa6-4f17-abc6-c4d12e6307c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "exploited", "source": "https://t.me/cyberok_news/256", "content": "\u2757\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Citrix NetScaler ADC \u0438 Gateway: CVE-2026-88771\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 (RCE) \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root. \u0423\u0447\u0451\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c, \u0441\u0435\u0441\u0441\u0438\u044f \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430.\n\n\u2139\ufe0f \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\nCVE-2026-88771 \u2014 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u043b\u043e\u0433\u0438\u043d\u0430. Payload \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043b\u043e\u0433\u0438 NetScaler, \u043e\u0442\u043a\u0443\u0434\u0430 \u0435\u0433\u043e \u043f\u043e\u0434\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 Perl-\u0441\u043a\u0440\u0438\u043f\u0442 ns_monuploadd_err.pl, \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0449\u0438\u0439 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 shell \u0431\u0435\u0437 \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0412\u0435\u043a\u0442\u043e\u0440 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u043e\u0434\u043d\u0438\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u043e\u043c: User-Agent \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043b\u044f, \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0449\u0438\u0435 \u0432 \u043b\u043e\u0433\u0438, \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b. \u0423\u044f\u0437\u0432\u0438\u043c \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u26a1\ufe0f \u0425\u0440\u043e\u043d\u043e\u043b\u043e\u0433\u0438\u044f\n\u2022 26.09.2026 \u2014 watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 0-day, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\u2022 27.09.2026 \u2014 Citrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c CTX697096. CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2026-88771 \u0438 CVE-2026-88772 \u0432 KEV, \u0441\u0440\u043e\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u2014 30.09.2026.\n\u2022 28.09.2026 \u2014 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 \u0440\u0430\u0431\u043e\u0447\u0438\u043c PoC \u0438 Detection Artifact Generator, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u26a0\ufe0f \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 \u0441\u0435\u0442\u0438\nCitrix \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u043f\u043e \u0441\u0435\u0442\u0438, \u2014 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u0435.\n\n\ud83d\udd3aCVSS v4.0: 9.5 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\ud83d\udccb \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c CTX697096 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\u2022 \u041f\u043e\u043c\u0438\u043c\u043e CVE-2026-88771, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 \u0441\u0435\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0434\u043b\u044f CVE-2026-88772 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 DTLS, RCE/DoS, CVSS 9.5). \n\u2022 \u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0448\u0435\u0441\u0442\u044c \u2014 CVE-2026-88773 (HTTP request smuggling, 9.3) \u0438 CVE-2026-88774 \u2014 88778 (memory overflow, predictable values, 7.0\u20138.8) \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u0432\u0441\u0435 \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439. \n\u2022 \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e: CVE-2026-88778 \u043d\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u2014 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c Enhanced ISN Generation.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\u2022 NetScaler ADC \u0438 Gateway 14.1 \u0434\u043e 14.1-73.37.\n\u2022 NetScaler ADC \u0438 Gateway 13.1 \u0434\u043e 13.1-64.23.\n\u2022 NetScaler ADC FIPS \u0434\u043e 14.1-73.37 FIPS.\n- NetScaler ADC FIPS \u0438 NDcPP \u0434\u043e 13.1-37.279.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\u2022 14.1-73.37, 13.1-64.23, 14.1-73.37 FIPS, 13.1-37.279 FIPS/NDcPP.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u043e\u043c, \u0438 \u0433\u0438\u0431\u0440\u0438\u0434\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Secure Private Access. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b Citrix \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f. \u0414\u043b\u044f CVE-2026-88771 workaround \u043d\u0435\u0442. \u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0435 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2026, \u0442\u043e\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n2. \u0414\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0434\u0430\u043c\u043f\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043b\u043e\u0433\u0438: \u043f\u0430\u0442\u0447 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u0436\u0435 \u0441\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0430\u0442\u0442\u0435\u0440\u043d pitboss PPE unexpectedly died NSPPE \u0441 \u043d\u0435\u0442\u0438\u043f\u0438\u0447\u043d\u044b\u043c\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438.\n\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e IoC \u0447\u0435\u0440\u0435\u0437 Security Advisory \u0432 NetScaler Console.\n\u041f\u0440\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0438 \u043d\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0441\u0435\u0441\u0441\u0438\u0439 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b.\n\n\ud83d\udd17 \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 watchTowr + PoC \n\ud83d\udd17 \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c Citrix CTX697096\n\ud83d\udd17 \u041a\u0430\u0440\u0442\u043e\u0447\u043a\u0430 CVE-2026-88771 \u0432 NVD \n\ud83d\udd17 FAQ watchTowr", "creation_timestamp": "2026-09-28T14:20:50.000000Z"} {"uuid": "cbc7d82a-efa6-4f17-abc6-c4d12e6307c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "exploited", "source": "https://t.me/cyberok_news/256", "content": "\u2757\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Citrix NetScaler ADC \u0438 Gateway: CVE-2026-88771\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 (RCE) \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root. \u0423\u0447\u0451\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c, \u0441\u0435\u0441\u0441\u0438\u044f \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430.\n\n\u2139\ufe0f \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\nCVE-2026-88771 \u2014 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u043b\u043e\u0433\u0438\u043d\u0430. Payload \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043b\u043e\u0433\u0438 NetScaler, \u043e\u0442\u043a\u0443\u0434\u0430 \u0435\u0433\u043e \u043f\u043e\u0434\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 Perl-\u0441\u043a\u0440\u0438\u043f\u0442 ns_monuploadd_err.pl, \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0449\u0438\u0439 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 shell \u0431\u0435\u0437 \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0412\u0435\u043a\u0442\u043e\u0440 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u043e\u0434\u043d\u0438\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u043e\u043c: User-Agent \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043b\u044f, \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0449\u0438\u0435 \u0432 \u043b\u043e\u0433\u0438, \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b. \u0423\u044f\u0437\u0432\u0438\u043c \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u26a1\ufe0f \u0425\u0440\u043e\u043d\u043e\u043b\u043e\u0433\u0438\u044f\n\u2022 26.09.2026 \u2014 watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 0-day, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\u2022 27.09.2026 \u2014 Citrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c CTX697096. CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2026-88771 \u0438 CVE-2026-88772 \u0432 KEV, \u0441\u0440\u043e\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u2014 30.09.2026.\n\u2022 28.09.2026 \u2014 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 \u0440\u0430\u0431\u043e\u0447\u0438\u043c PoC \u0438 Detection Artifact Generator, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u26a0\ufe0f \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 \u0441\u0435\u0442\u0438\nCitrix \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u043f\u043e \u0441\u0435\u0442\u0438, \u2014 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u0435.\n\n\ud83d\udd3aCVSS v4.0: 9.5 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\ud83d\udccb \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c CTX697096 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\u2022 \u041f\u043e\u043c\u0438\u043c\u043e CVE-2026-88771, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 \u0441\u0435\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0434\u043b\u044f CVE-2026-88772 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 DTLS, RCE/DoS, CVSS 9.5). \n\u2022 \u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0448\u0435\u0441\u0442\u044c \u2014 CVE-2026-88773 (HTTP request smuggling, 9.3) \u0438 CVE-2026-88774 \u2014 88778 (memory overflow, predictable values, 7.0\u20138.8) \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u0432\u0441\u0435 \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439. \n\u2022 \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e: CVE-2026-88778 \u043d\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u2014 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c Enhanced ISN Generation.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\u2022 NetScaler ADC \u0438 Gateway 14.1 \u0434\u043e 14.1-73.37.\n\u2022 NetScaler ADC \u0438 Gateway 13.1 \u0434\u043e 13.1-64.23.\n\u2022 NetScaler ADC FIPS \u0434\u043e 14.1-73.37 FIPS.\n- NetScaler ADC FIPS \u0438 NDcPP \u0434\u043e 13.1-37.279.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\u2022 14.1-73.37, 13.1-64.23, 14.1-73.37 FIPS, 13.1-37.279 FIPS/NDcPP.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u043e\u043c, \u0438 \u0433\u0438\u0431\u0440\u0438\u0434\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Secure Private Access. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b Citrix \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f. \u0414\u043b\u044f CVE-2026-88771 workaround \u043d\u0435\u0442. \u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0435 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2026, \u0442\u043e\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n2. \u0414\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0434\u0430\u043c\u043f\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043b\u043e\u0433\u0438: \u043f\u0430\u0442\u0447 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u0436\u0435 \u0441\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0430\u0442\u0442\u0435\u0440\u043d pitboss PPE unexpectedly died NSPPE \u0441 \u043d\u0435\u0442\u0438\u043f\u0438\u0447\u043d\u044b\u043c\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438.\n\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e IoC \u0447\u0435\u0440\u0435\u0437 Security Advisory \u0432 NetScaler Console.\n\u041f\u0440\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0438 \u043d\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0441\u0435\u0441\u0441\u0438\u0439 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b.\n\n\ud83d\udd17 \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 watchTowr + PoC \n\ud83d\udd17 \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c Citrix CTX697096\n\ud83d\udd17 \u041a\u0430\u0440\u0442\u043e\u0447\u043a\u0430 CVE-2026-88771 \u0432 NVD \n\ud83d\udd17 FAQ watchTowr", "creation_timestamp": "2026-09-28T14:20:50.000000Z"} https://vulnerability.circl.lu/sighting/cbc7d82a-efa6-4f17-abc6-c4d12e6307c5/export Mon, 28 Sep 2026 14:20:50 +0000 https://vulnerability.circl.lu/sighting/a2673614-32db-4e1f-8d9d-23b1960e6b95/export {"uuid": "a2673614-32db-4e1f-8d9d-23b1960e6b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mwl7byjmgm2r", "content": "Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778", "creation_timestamp": "2026-09-28T11:24:42.012153Z"} {"uuid": "a2673614-32db-4e1f-8d9d-23b1960e6b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mwl7byjmgm2r", "content": "Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778", "creation_timestamp": "2026-09-28T11:24:42.012153Z"} https://vulnerability.circl.lu/sighting/a2673614-32db-4e1f-8d9d-23b1960e6b95/export Mon, 28 Sep 2026 11:24:42 +0000 https://vulnerability.circl.lu/sighting/2499051b-3889-4f2e-a65d-42c3714c078c/export {"uuid": "2499051b-3889-4f2e-a65d-42c3714c078c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwkweluzbu2d", "content": "\ud83d\udd17 CVE : CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, CVE-2026-88778", "creation_timestamp": "2026-09-28T08:45:05.898669Z"} {"uuid": "2499051b-3889-4f2e-a65d-42c3714c078c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwkweluzbu2d", "content": "\ud83d\udd17 CVE : CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, CVE-2026-88778", "creation_timestamp": "2026-09-28T08:45:05.898669Z"} https://vulnerability.circl.lu/sighting/2499051b-3889-4f2e-a65d-42c3714c078c/export Mon, 28 Sep 2026 08:45:05 +0000 https://vulnerability.circl.lu/sighting/b067cdc1-2a67-4da4-b6bf-ca310e5864c0/export {"uuid": "b067cdc1-2a67-4da4-b6bf-ca310e5864c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-965", "content": "", "creation_timestamp": "2026-09-28T05:16:20.000000Z"} {"uuid": "b067cdc1-2a67-4da4-b6bf-ca310e5864c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-965", "content": "", "creation_timestamp": "2026-09-28T05:16:20.000000Z"} https://vulnerability.circl.lu/sighting/b067cdc1-2a67-4da4-b6bf-ca310e5864c0/export Mon, 28 Sep 2026 05:16:20 +0000 https://vulnerability.circl.lu/sighting/baf550ef-3f11-4f61-8d71-90002cf3228e/export {"uuid": "baf550ef-3f11-4f61-8d71-90002cf3228e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://www.ncsc.gov.uk/news/exploitation-of-vulnerabilities-affecting-citrix-netscaler-adc-and-citrix-netscaler-gateway", "content": "", "creation_timestamp": "2026-09-28T05:00:00.000000Z"} {"uuid": "baf550ef-3f11-4f61-8d71-90002cf3228e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88773", "type": "seen", "source": "https://www.ncsc.gov.uk/news/exploitation-of-vulnerabilities-affecting-citrix-netscaler-adc-and-citrix-netscaler-gateway", "content": "", "creation_timestamp": "2026-09-28T05:00:00.000000Z"} https://vulnerability.circl.lu/sighting/baf550ef-3f11-4f61-8d71-90002cf3228e/export Mon, 28 Sep 2026 05:00:00 +0000