hxxps://192.168.80[.]125/saml/loginURL
Reported by 1 independent source · first reported by watchTowr Labs · last reported
Last reported 6 months ago
What the reports say
1 report, newest first · the exact sentence from each-
The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)“<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="hxxps://192.168.80[.]125/saml/login"></md:SingleSignOnService>”
Indicators reported together
named in the same reports- hxxps://192.168.80[.]125/cgi/logoutin 1 report
- asdf[.]idin 1 report
Copy these 2 indicators · defanged
Also named with it: CVE-2026-3055
Thanks — we review every report.