CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)
2026-10-05T20:51:40Z•d26b361ab2f2e3ec931cbbc23229746f4295528951637ffa5668473400f819a4
CVE-2026-88779CVE-2026-96940AI securityCISA KEVCitrix NetScalerExchange ServerMilk DragonNaiLongNetScaler ADCNetScaler GatewayOTP theftShinyHuntersactive exploitationcredential theftdenial of servicemacOS privacymailbox data exposurememory overflowpayment card theftphishingsocial engineering
What happened
Help Net Security reports active exploitation of CVE-2026-88779, a memory overflow vulnerability in Citrix NetScaler ADC and Gateway appliances that can cause repeated denial of service; CISA added it to the Known Exploited Vulnerabilities catalog. The feed also covers phishing campaigns using fake social-media discounts to steal payment data and OTPs, a high-severity authenticated Exchange Server mailbox-access flaw (CVE-2026-96940) without known exploitation, AI-security tooling, ShinyHunters investigations, and macOS privacy controls.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- d26b361ab2f2e3ec931cbbc23229746f4295528951637ffa5668473400f819a4
- Enrichment time
- 2026-10-05T20:51:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.