NetScaler Attack Payloads Aim for Superuser Persistence and CSS-Masked Web Shells
Attackers exploit CVE-2026-88771 on NetScaler to deploy reverse shells, create sec_monitor superuser, steal configs and hide PHP web shells as CSS.
CyberWorldOps
Latest news
More news
Page 22 / 91 · 822 articles
BeyondTrust Flaw Shows How Fast Public Vulnerabilities Can Become Active Threats
Critical BeyondTrust flaw CVE-2026-1731, found by Hacktron AI, was exploited within 4 days. Google reports surge in fast n-day attacks in 2026.
Two Zammad Zero-Days Let an AI-Driven Intruder Reach Root on DIVD Systems
DIVD says two Zammad zero-days enabled session hijacking, remote code execution and root escalation in an AI-driven breach. Upgrade to Zammad 7 now.
NetScaler Intrusions Turn a Gateway Flaw Into Root-Level Network Access
Mandiant links CVE-2026-88772 to NetScaler attacks granting root access, web shells, and internal network tunnels across dozens of orgs.
Malicious VPN Server Could Seize Root Control of WatchGuard Firebox Appliances
WatchGuard patched 15 Fireware OS flaws, including critical CVE-2026-86131 for root RCE via malicious BOVPN over TLS server.
Cisco SD-WAN Authentication Flaw Gives Remote Attackers Full Administrative Access
Cisco warns of CVE-2026-76504, a CVSS 9.8 auth bypass in Catalyst SD-WAN Manager exploited for admin access. See fixes and detection tips.
RedFlick Reduces Victim Interaction in Star Blizzard’s Espionage Phishing Campaigns
Star Blizzard uses RedFlick to deliver CosmicPulse backdoor with one click, targeting Ukraine, NGOs and think tanks in espionage phishing campaigns.
OpenSSL DTLS Retransmission Bug Can Leak Heap Data or Terminate Applications
OpenSSL CVE-2026-84782 DTLS flaw can leak heap memory or crash apps. See affected versions, fixes, Ubuntu and Debian patches.
Citrix NetScaler Exploits Turn Edge Appliances Into Root-Level Network Tunnels
Citrix confirms active NetScaler exploits CVE-2026-88771 and CVE-2026-88772 enabling root access, web shells and network tunneling.