Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Reported by Rapid7

Summary by Cyber Security News19 Oct 2026, 17:11 CET

About this summary. This is a short excerpt from the description that Rapid7 published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.rapid7.com/blog/post/ra-netscaler-intrusions-chaining-cve-2026-88771-and-cve-2026-88779

OverviewIn early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments.

Read the full article at Rapid7 →

Source attribution: headline and facts are from Rapid7 (rapid7.com). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability

CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability

VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE

CVE-2026-88779: Citrix NetScaler Zero-Day

Citrix Patches Third Actively Exploited NetScaler Zero Day

Citrix discloses third actively exploited NetScaler zero-day in less than a week