Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into internal networks.
https://www.bleepingcomputer.com/news/security/hackers-exploit-citrix-netscaler-zero-day-to-deploy-web-shells/
BleepingComputer
npub1pk…z6763
2026-09-29 18:37:32 UTC
Author Public Key
npub1pkrnqz97z2wckgmwglckccgg65eanvw3wpvuses7npqlvv6st06svz6763Seen on
wss://relay.momostr.pinkPublished at
2026-09-29 18:37:32 UTCEvent JSON
{
"id": "e48fc30abb35480d553bba0884ce59da1143028aed5c3d208cd806462aae39aa",
"pubkey": "0d873008be129d8b236e47f16c6108d533d9b1d17059c8661e9841f633505bf5",
"created_at": 1790707052,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@BleepingComputer/117355777425171440",
"web"
],
[
"proxy",
"https://infosec.exchange/users/BleepingComputer/statuses/117355777425171440",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/BleepingComputer/statuses/117355777425171440",
"pink.momostr"
],
[
"-"
]
],
"content": "Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into internal networks.\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-citrix-netscaler-zero-day-to-deploy-web-shells/",
"sig": "1b9dd14e76386e06190a020e2a12ad71ce024f8079b9b20334cdddf833d8925bb690c5527f70eddce18bcc74e085994284e70be280c26b059df7fc66d8ad16d9"
}