Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

🗓️ 30 Sep 2026 08:24:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 3 Views

Unauthenticated memory overflow in NetScaler NSPPE DTLS handling leads to root access.

Reporter	Title	Published	Views	Family All 31
GithubExploit	Exploit for CVE-2026-88772	28 Sep 202609:58	–	githubexploit
GithubExploit	Exploit for CVE-2026-88772	27 Sep 202620:24	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Citrix Netscaler_Application_Delivery_Controller	29 Sep 202614:28	–	githubexploit
BDU FSTEC	The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) access control systems, related to insufficient validation of input data, allows a perpetrator to exploit these systems.	28 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) – a system for controlling access to virtual environments – stems from insufficient validation of input data. This allows attackers to execute arbitrary code or trigger service failures.	28 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-88771	27 Sep 202609:09	–	circl
Circl	CVE-2026-88772	27 Sep 202609:09	–	circl
CISA KEV Catalog	Citrix NetScaler Improper Input Validation Vulnerability	27 Sep 202600:00	–	cisa_kev
CISA KEV Catalog	Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	27 Sep 202600:00	–	cisa_kev
Citrix	Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778	27 Sep 202615:22	–	citrix

30 Sep 2026 11:32Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.19.8

CVSS 49.5

EPSS0.01301

SSVC

Citrix NetScaler ADC NetScaler Gateway NSPPE memory overflow DTLS root access