SZB-b3dabce3f4
Citrix zero-days and Oracle PeopleSoft flaw reported under active exploitation
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Citrix
- First seen
Summary
A Mastodon post citing a news article says two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are being actively exploited for remote code execution. The post says CISA has updated its Known Exploited Vulnerabilities catalog.
If you use Citrix
Apply the Citrix patches for CVE-2026-88771 and CVE-2026-88772 immediately
Apply the Oracle PeopleSoft patch for CVE-2026-35273
Review CISA's KEV catalog entries and check systems for signs of compromise
What the sources say 1
· Mastodon: “Two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are under active exploitation for RCE.” Source