Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE8 IOCs
Citrix Confirms NetScaler Zero-Day RCE Flaws Actively Exploited in Attacks
Diamond Model
Indicators of Compromise
Indicators of Compromise8
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-88773 exploitintel-blogmalware | Medium | 54 | Sep 28, 26 |
| CVE | CVE-2026-88775 exploitintel-blogmalware | Medium | 54 | Sep 28, 26 |
| CVE | CVE-2026-88772 exploitintel-blogvulnerability | High | 62 | Sep 28, 26 |
| CVE | CVE-2026-88778 exploitintel-blogmalware | Medium | 54 | Sep 28, 26 |
| CVE | CVE-2026-88771 exploitintel-blogresearched | High | 64 | Sep 27, 26 |
| CVE | CVE-2026-88776 exploitintel-blogmalware | Medium | 54 | Sep 28, 26 |
| CVE | CVE-2026-88774 exploitintel-blogmalware | Medium | 54 | Sep 28, 26 |
| CVE | CVE-2026-88777 exploitintel-blogvulnerability | Medium | 54 | Sep 28, 26 |
IOC Relationship Graph
IOC Relationship Graph8 total IOCs
CVE