techarda
⌕
Security

CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability

Zscaler
Linked source · Zscaler ThreatLabz
From the source: Zscaler ThreatLabz

On September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution (RCE) vulnerability affecting NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The vulnerability carries a CVSS v3.1 score of 9.8 according to NVD and a CVSS v4.0 score of 9.5 according to the Citrix security bulletin CTX697096. The vulnerability allows unauthenticated…

Read the full story on Zscaler ThreatLabz
Originally published by Zscaler ThreatLabz on 17 Oct 2026. Techarda links to the original rather than republishing it. Read the full article →

Ask the square

The story is what was announced. If it raises a question for your team, ask the people who run this technology day to day. Your post links back to this story, so the next reader finds it too.

Ask a question about this storyStart a discussionSee the Security space →

Recent threads in Security

Something wrong or out of date? Suggest a correction. We reply within 5 business days.

More from Zscaler

Recent updates from Zscaler, so you can tell whether this is a one-off or part of a pattern.

All Zscaler news →
Security

Ransomware at Machine Speed: How GenAI Shrinks the Path after Initial Access

Artificial Intelligence technologies have made a huge impact on the security industry. But as with any public technology, adversaries have access to AI as well. They’re wasting no time incorporating AI into their malicious workflows and ransomware operators have been able to leverage it - unfortunately, this has led to some of their successes.Fortunately, there is plenty of potential for…

Zscaler·via Zscaler ThreatLabz
Security

Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions

Zscaler ThreatLabz analyzed a recently active exploitation campaign in which a threat actor abused ARTEX to target South Korean financial institutions. ARTEX is an open source agentic penetration testing framework developed in China that uses large language models (LLMs) to automate reconnaissance and exploitation tasks. First observed in late September 2026, the campaign affected…

Zscaler·via Zscaler ThreatLabz
Security

Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware

In July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor backed by the North Korean government that has targeted the cryptocurrency industry for years. This campaign also significantly overlaps with the previously reported KelpDAO incident, the analysis…

Zscaler·via Zscaler ThreatLabz

More in Security

What other companies in Security are doing. The category page shows who’s active, side by side.

Compare companies in Security →
Security

September 2026 Cyber Threat Landscape: Global Attacks Jump 48% as Phishing and GenAI Data Exposure Rise

Key takeaways Organizations experienced 2,803 weekly cyber attacks on average in September, up 16% month over month and 48% year over year. Education remained the most targeted sector, averaging 6,656 weekly attacks per organization, a 59% year-over-year increase. Europe recorded the sharpest regional rise at 61% year over year, while Latin America faced the highest volume at 3,813 weekly attacks…

Check Point Software·via Check Point Software Blog
Security

Introducing Clairic, a new System One class of extraction models

Clairic is a new model from Cloudflare that is a System One extraction modeI, capable of extracting, computing, estimating, and forecasting data from unstructured inputs.

Cloudflare·via Cloudflare Blog
Security

Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in

Why the controls on an AI agent have to live outside of it, and what a security operations team can implement and maintain those controls. The new privileged user in your environment Security teams spent two decades learning how to work with the people they trust most. Domain admins, DBAs, finance approvers and contractors with VPN access all get a mature playbook: verified identity, scoped…

Rapid7·via Rapid7 Blog
Security

Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus . A legacy API endpoint could be exploited to bypass authentication and run various functions without authentication ( CVSS: 8.6 High ). The most serious functions allow for full database read ( CVSS: 8.5 High ) and an insecure file…

Rapid7·via Rapid7 Blog