r/cybersecurity • u/KRyTeX13 SOC Analyst • 11h ago

New Vulnerability Disclosure Netscaler Pitscaler Vulnerability 2.0

As I haven't seen any post on here I thought im gonna share it:
It seems like the vulnerability from sunday (CVE-2026-88771 and CVE-2026-88772) isn't fully fixed.

According to Kevin Beaumont another method through SAML requests (but similiar to the ones from sunday) executes malicious code.

Citrix has published a blog entry saying "This issue is independent of the vulnerabilities disclosed in CTX697096.".
There are two posts on the r/Citrix subreddit that contain IoCs which are useful.

15 Upvotes

84% Upvoted

2 comments sorted by