What TENEX Observed Inside Active Exploitation of NetScaler Zero-Day

TENEX THREAT INTELLIGENCE TEAM threat.intel@tenex.ai Published: September 30, 2026 What TENEX Observed Inside Active Exploitation of CVE-2026-88771 A Citrix NetScaler zero-day went from a pre-CVE warning to a public PoC to mass exploitation in under 72 hours. Here’s what we watched get delivered, from an off-the-shelf C2 to the scripts and reverse shells that came […] The post What TENEX Observed Inside Active Exploitation of NetScaler Zero-Day appeared first on TENEX .