Unverified50% confidenceEventExact time
NCSC-NL advised operators in a private pre-notification to shut down devices; Citrix released fixed versions on September 27, 2026, and CISA added both CVEs to its Known Exploited Vulnerabilities catalog the same day.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/16/2026
First Seen
Valid until: 10/30/2026
Sources
Related Entities
Related Claims
UnverifiedCISA added CVE-2026-94127 to the Known Exploited Vulnerabilities (KEV) catalog on the same day it was disclosed, September 22.70% similarUnverifiedOn October 8, CISA added five vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog all at once, each with a three-day mitigation window and a uniform deadline of October 11.62% similarUnverifiedCVE-2026-88771 is a CVSS 9.5 pre-authentication command injection vulnerability affecting all NetScaler ADC and Gateway deployments, including default configurations.59% similarUnverifiedAF_UNIX GC 代码历史上曾多次引发安全问题，包括 CVE-2021-0920 和 CVE-2024-108658% similarUnverifiedThe CVE-2024-21626 vulnerability exploited a file descriptor leak in runc when handling working directories to achieve container escape, and emerged in early 2024.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1045837API
curl https://kongchang.com/api/v1/knowledge/claims/1045837MCP
get_claim(id=1045837)