{"@context":"https://schema.org","@type":"CreativeWork","@id":"https://froggit.ai/public/capsules/1d41eed8-c2fe-4b43-be9e-8e1a3e437591","identifier":"1d41eed8-c2fe-4b43-be9e-8e1a3e437591","url":"https://froggit.ai/public/capsules/1d41eed8-c2fe-4b43-be9e-8e1a3e437591","name":"Recently Disclosed Zero-Day Vulnerabilities (as of October 26, 2026)","text":"# Recently Disclosed Zero-Day Vulnerabilities (as of October 26, 2026)\n\n## Citrix NetScaler — Multiple Zero-Days\n\n- Citrix disclosed two critical NetScaler zero-day vulnerabilities on **September 27, 2026**, after reports of exploitation had caused alarm among customers for several days; **CVE-2026-88771** is a remote code execution flaw. (https://www.darkreading.com/vulnerabilities-threats/netscaler-zero-days-chaos-citrix)\n- \"Advanced and suspected state-sponsored threat actors\" are likely behind the initial targeted intrusions that leveraged **CVE-2026-88772**, one of the two recently disclosed NetScaler flaws, with exploitation suspected since early September. (https://www.helpnetsecurity.com/2026/09/30/cve-2026-88772-netscaler-exploitation-zero-day/)\n- Citrix released emergency updates for a new NetScaler **denial-of-service** vulnerability tracked as **CVE-2026-88779**, which has been exploited in zero-day attacks. (https://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/)\n- Citrix subsequently warned customers about another actively exploited NetScaler flaw — a newly disclosed **memory overflow** issue — requiring another round of patching for some customers. (https://www.csoonline.com/article/4230642/citrix-warns-of-actively-exploited-netscaler-flaw-days-after-zero-day-patch-rush.html)\n\n## Apple CoreGraphics\n\n- Apple patched a high-severity **CoreGraphics** zero-day reportedly exploited against specific targeted individuals in \"extremely sophisticated\" targeted attacks; the vulnerability enables arbitrary code execution through maliciously crafted files. (https://www.msn.com/en-us/technology/software/apple-patches-coregraphics-zero-day-used-in-extremely-sophisticated-targeted-attacks/ar-AA2ddpff)\n\n## PHP\n\n- On **October 21, 2026**, a flaw in the PHP computer language led to the shutdown of websites around the world, with precautionary takedowns as experts said the vulnerability could be exploited; PHP is used","keywords":["trinity-research","sentinel_research","cybersecurity","zero-day"],"about":[],"citation":["https://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/","https://www.helpnetsecurity.com/2026/09/30/cve-2026-88772-netscaler-exploitation-zero-day/","https://www.theguardian.com/technology/2026/oct/21/flaw-in-php-computer-language-leads-to-shutdown-of-websites-around-world","https://cyberscoop.com/microsoft-patch-tuesday-october-2026/","https://www.msn.com/en-us/technology/software/apple-patches-coregraphics-zero-day-used-in-extremely-sophisticated-targeted-attacks/ar-AA2ddpff","https://www.csoonline.com/article/4230642/citrix-warns-of-actively-exploited-netscaler-flaw-days-after-zero-day-patch-rush.html","https://note.com/panzer03/n/nc372da51dc30?hl=en","https://www.darkreading.com/vulnerabilities-threats/netscaler-zero-days-chaos-citrix","https://note.com/panzer03/n/nc372da51dc30"],"isPartOf":{"@type":"Dataset","name":"Froggit.ai Knowledge Graph","url":"https://froggit.ai"},"publisher":{"@type":"Organization","name":"Froggit.ai","url":"https://froggit.ai"},"dateCreated":"2026-10-26T04:59:35.958555Z","dateModified":"2026-10-26T04:59:35.958555Z","isBasedOn":"https://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/","additionalProperty":[{"@type":"PropertyValue","name":"trust_level","value":100},{"@type":"PropertyValue","name":"verification_status","value":"sources_verified"},{"@type":"PropertyValue","name":"provenance_status","value":"valid"},{"@type":"PropertyValue","name":"evidence_level","value":"verified_report"},{"@type":"PropertyValue","name":"content_hash","value":"ac452ea9d0f23f1534722db6d63108e015acddf22702749bfe653e61c3beb05c"}]}