Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
2026-09-30T07:23:59Z•7191f6c8166cc44357a01e5e370b9963ef713f1c2bce007becc9a079f747f535
CVE-2026-35273CVE-2026-86950CVE-2026-88771CVE-2026-88772AI agent securityApple CoreGraphicsAzureCISA KEVCitrix NetScalerDockerOracle PeopleSoftactive exploitationcloud securitycredential theftdata theftmalicious npm packagesmalwarephishingremote code executionstate-sponsored activitysupply-chain securityzero-day
What happened
The feed highlights active exploitation of critical vulnerabilities, including Citrix NetScaler pre-authentication remote code execution flaws, Oracle PeopleSoft unauthenticated RCE, and an Apple CoreGraphics flaw potentially exploited in targeted attacks. It also covers credential theft, supply-chain abuse through malicious npm packages, cloud destruction using compromised Azure service principals, Docker-host compromise, malware campaigns, and state-sponsored phishing. Immediate priorities include patching internet-facing systems, reviewing authentication and service-principal activity, and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 7191f6c8166cc44357a01e5e370b9963ef713f1c2bce007becc9a079f747f535
- Enrichment time
- 2026-09-30T07:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.