2026-10-07 11:58 UTC

Citrix NetScaler vulnerabilities/attacks

Like many in the industry, we are busy responding to the latest Citrix vulnerabilities the last few weeks. We share data on exposed Citrix NetScaler instances in our Device Identification fingerprinting report and on CVE-2026-88771/CVE-2026-88772/CVE-2026-88779 in our Vulnerable HTTP reporting.

Links

• Citrix NetScaler exposure over time
• CVE-2026-88771/CVE-2026-88772/CVE-2026-88779 exposure over time

References

• https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/
• https://www.shadowserver.org/what-we-do/network-reporting/device-identification-report/
• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776
• https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/

2026-09-08 19:57 UTC

MikroTik vulnerabilities!

We added MikroTik SSH identification to our daily scans on 2026-09-04. Follow links below for MikroTik vulnerabilty information and patches.

Links

• MikroTik devices with SSH exposed over time (no vulnerability assessment)
• Distribution of MikroTik devices with SSH enabled (World Map view)

References

• https://x.com/Shadowserver/status/2096678032744280476
• https://mikrotik.com/supportsec/september-2026-vulnerability
• https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/