Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE4 IOCs
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-88771 | High | Score 82/100 | First seen |
| CVE | CVE-2026-75650 | High | Score 67/100 | First seen |
| URL | http://209.141.43.95/files/kw2-freebsd-x64-s11;chmod$ | High | Score 58/100 | First seen |
| CVE | CVE-2026-107406 | Medium | Score 43/100 | First seen |
IOC Relationship Graph
4 total IOCs
CVEURL
scroll to zoom · drag to pan · click IOC to open