
Source-linked briefing site on Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 (CTX697096), with timeline, public IoCs, detection guidance, and remediation notes.
Source for pitscaler.com: an independent, source-linked briefing on the Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 (bulletin CTX697096). It covers all eight CVEs in the bulletin, a timeline, public IoCs, detection and remediation.
Not affiliated with Citrix or Cloud Software Group. Every claim links to a public source.
public/index.html: page structure and prose.public/app.js: the data (SOURCES, CVES, TIMELINE, IOCS, BUILDS, FAQ) and the rendering code.public/style.css: styling.build.mjs: generates every page and format (static HTML, Markdown, llms.txt, sitemap, the IoC CSV) into dist/ and worker.js.Corrections and new public sources are welcome. Open an issue, or send a pull request:
IOCS in public/app.js with type, value, context, caveat, cite and share.SOURCES first, then refer to it by id in cite.TIMELINE with date, kind, title, body and cite.public/index.html and cite as <a class="cite" href="https://github.com/emilstahl/pitscaler/blob/main/URL">[Name]</a>. The URL must exist in SOURCES.node build.mjs (Node 20 or later). It must pass. It fails if a citation URL is missing from SOURCES.The pull request build check runs the same build automatically.
Rules:
public/app.js, don't use backticks, and don't write a dollar sign directly followed by an opening brace. Build it as '$' + '{IFS}'.dist/ or worker.js; they are generated.You can also send corrections to [email protected] or on Signal (emil.112).
Deploys are handled by the maintainer.