Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

6 detections

Detects attempts to bypass authentication on Citrix NetScaler Gateway or management interfaces by using alternate URI paths, double-encoding, or path traversal techniques to reach restricted administrative endpoints. This is consistent with exploitation attempts targeting vulnerabilities like CVE-2026-19490.
avatar
Ankit Mehta@Secvyn
avatar
Detections.ai Community
2 months ago
25020
Identifies NetScaler ADC or Gateway software versions in the inventory that are known to be vulnerable to CVE-2026-88771 and CVE-2026-88772, despite having received the patch for CVE-2026-19490.
avatar
Arnold Chan@slaz
avatar
Hunters
2 months ago
3012
Identifies NetScaler ADC or Gateway software versions in the inventory that are known to be vulnerable to CVE-2026-88771 and CVE-2026-88772, despite having received the patch for CVE-2026-19490.
avatar
Arnold Chan@slaz
avatar
Detections.ai Community
2 months ago
3011
Identifies NetScaler ADC or Gateway software versions in the inventory that are known to be vulnerable to CVE-2026-88771 and CVE-2026-88772, despite having received the patch for CVE-2026-19490.
avatar
Arnold Chan@slaz
avatar
Midnight Slayer
2 months ago
108
Identifies NetScaler ADC or Gateway software versions in the inventory that are known to be vulnerable to CVE-2026-88771 and CVE-2026-88772, despite having received the patch for CVE-2026-19490.
avatar
Arnold Chan@slaz
avatar
Detection & Hunting Community
2 months ago
108
Identifies NetScaler ADC or Gateway software versions in the inventory that are known to be vulnerable to CVE-2026-88771 and CVE-2026-88772, despite having received the patch for CVE-2026-19490.
avatar
Arnold Chan@slaz
Defender - KQL
2 months ago
005