Meanwhile I've updated my Citrix honeypot to handle CVE-2026-88771 - but so far have seen absolutely no attacks. I'll run some tests later today to check if it doesn't miss them due to some kind of bug.
Visualization (empty so far):
https://pandora.nlcv.bas.bg/grafana/d/6QAI59wZk/citrixhoneypot?orgId=1&refresh=15m&from=now-24h&to=now