Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: two edge RCE flaws attacked before a fix existed

·10 views

Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: two edge RCE flaws attacked before a fix existed Citrix published fixes for two NetScaler flaws on 2026-09-27 after watchTowr reported unpatched remote code execution bugs under active exploitation. Both flaws are rated 9.5 under CVSS v4. CVE-2026-88771 is improper input validation that lets an unauthenticated attacker run arbitrary commands. Citrix states that it affects all NetScaler ADC and NetScaler Gateway deployments on the affected versions, with no additional feature required. watchTowr said on 2026-09-26 that it was responding to rep

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

I Tested 5 AI Interview Copilots (Including the $29 One) — Here's My Honest Take

If you've ever bombed an interview you should have aced, you'll understand why I built an interview copilot. I froze in a Google interview — I knew the answers and couldn't get them out under pressure. So I built AissenceAI: an AI copilot that helps you structure answers live, plus mock interviews that actually score you. Then I did what any paranoid founder does: I lined up my product against the four most talked-about competitors, compared them feature by feature against their public pricing pages, and did the price math nobody else seems willing to do. Here's the honest result — including w

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Sophos Firewall logs and Wazuh: the newer syslog layout matches no decoder

Sophos Firewall can send syslog in two layouts. Wazuh 4.14.7 reads one of them. If your firewall uses the other, the logs arrive and nothing alerts, ever. We measured both, and tested two fixes. Sophos's own syslog guide documents both.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

ACP-420 Exam Walkthrough: Follow One Service Ticket Through All Eight Domains

ACP-420 is Atlassian's Managing Jira Service Projects for Cloud exam: 75 questions in 180 minutes, and you need 50 correct to pass. The fastest way to understand it is not to memorise the eight domains as a list, but to follow one customer request from the moment it is raised until it shows up on a dashboard. Atlassian prices the exam at $249 plus tax, runs it proctored online, and keeps the certification valid for 24 months, according to the Managing Jira Service Projects for Cloud certification page. The scope is narrow on purpose. It covers Jira Service Management Cloud, company-managed pro

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Stop Polling Drop Directories: Practical systemd.path Units on Linux

You have a drop directory. A scanner dumps PDFs into /var/spool/inbox, a camera drops JPEGs into /var/lib/captures, a CI agent writes a flag file when a build is ready. The usual “solution” is a shell loop: while true; do find /var/spool/inbox -type f -print0 | xargs -0 -r process-one sleep 5 done That works until it does not. You burn wakeups when the directory is empty, miss batches that land between polls, race with partial writes, and end up reinventing supervision, logging, and restart policy around a sleep. systemd already has a unit type for this: .path units.

0 comments Read more at DEV Community