A default NetScaler answers anyone who connects to its IP and reveals its hostname in the certificate. During the CVE-2026-88771/-88772 zero-day wave, that made it an easy target for IP-based mass scans. Our new blog post shows how to enforce SNI in a few lines of config, so the next wave passes you by and you gain time until a patch arrives. 👉 https://cirosec.de/en/news/hiding-your-netscaler-from-mass-exploitation-with-sni/
#NetScaler #Citrix #ITSecurity #IncidentResponse
cirosecHiding your NetScaler from mass exploitation with SNI - cirosecOctober 27, 2026 - A default NetScaler answers anyone who connects to its IP and reveals its hostname in the certificate. During the CVE-2026-88771/-88772 zero-day wave, that made it an easy target for IP-based mass scans. Our new blog post shows how to enforce SNI in a few lines of config, so the next wave passes you by and you gain time until a patch arrives.