#ParsedReport #CompletenessUnknown
06-10-2026

CITRIX 0-DAY EXPLOITS: CVE-2026–88771 & CVE-2026–88772 IN THE WILD

https://theravenfile.com/2026/10/06/citrix-0-day-exploits-cve-2026-88771-cve-2026-88772-in-the-wild/

Report completeness: Unknown

Threats:
Slapshot
Whipshot
Platypus
Pitboss
Smuggling_technique
Chisel_tool
Sliver_c2_tool
Tunneler

Victims:
Citrix netscaler adc and gateway appliances

CVEs:
CVE-2026-88777 [Vulners]
CVE-2026-88776 [Vulners]
CVE-2026-88772 [Vulners]
CVE-2026-88771 [Vulners]
CVE-2026-88778 [Vulners]
CVE-2026-88774 [Vulners]
CVE-2026-88773 [Vulners]
CVE-2026-88775 [Vulners]

TTPs:
Tactics: 5
Technics: 0

IOCs:
File: 31
Domain: 1
Hash: 39
IP: 169
Url: 25

Soft:
crontab, curl, Zoom, Citrix NetScaler ADC

Algorithms:
sha256, base64, md5, pbkdf2, sha1

Functions:
SetHandler

Languages:
php, perl, python