Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Imported from official source

Cybersecurity Classified by Officially

In early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments. …

This is an extract. The publication continues at the source.

Read the original at the source: https://www.rapid7.com/blog/post/ra-netscaler-intrusions-chaining-cve-2026-88771-and-cve-2026-88779

Officially imported this from Rapid7’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

This publication has changed since it was first published

2 versions recorded. The original is kept in full — nothing is overwritten.

  1. v2 imported change on current
  2. v1 as first published on Titled: “NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779”

Provenance

Organization
Rapid7 — imported from official source
Official source
https://blog.rapid7.com/rss/ RSS
Imported
October 19, 2026 16:02
Versions
2 recorded
Identity
blt2ceccfca9edb1fab

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.