Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

2026-09-30T07:23:59Z•7191f6c8166cc44357a01e5e370b9963ef713f1c2bce007becc9a079f747f535
CVE-2026-35273CVE-2026-86950CVE-2026-88771CVE-2026-88772AI agent securityApple CoreGraphicsAzureCISA KEVCitrix NetScalerDockerOracle PeopleSoftactive exploitationcloud securitycredential theftdata theftmalicious npm packagesmalwarephishingremote code executionstate-sponsored activitysupply-chain securityzero-day

What happened

The feed highlights active exploitation of critical vulnerabilities, including Citrix NetScaler pre-authentication remote code execution flaws, Oracle PeopleSoft unauthenticated RCE, and an Apple CoreGraphics flaw potentially exploited in targeted attacks. It also covers credential theft, supply-chain abuse through malicious npm packages, cloud destruction using compromised Azure service principals, Docker-host compromise, malware campaigns, and state-sponsored phishing. Immediate priorities include patching internet-facing systems, reviewing authentication and service-principal activity, and

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
7191f6c8166cc44357a01e5e370b9963ef713f1c2bce007becc9a079f747f535
Enrichment time
2026-09-30T07:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution · Baitaphish