The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) access control systems, related to insufficient validation of input data, allows a perpetrator to exploit these systems.

🗓️ 28 Sep 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 11 Views

Remote code execution in NetScaler ADC and NetScaler Gateway via insufficient input validation.

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for CVE-2026-88772	27 Sep 202620:24	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Citrix Netscaler_Application_Delivery_Controller	29 Sep 202614:28	–	githubexploit
Circl	CVE-2026-88771	27 Sep 202609:09	–	circl
CISA KEV Catalog	Citrix NetScaler Improper Input Validation Vulnerability	27 Sep 202600:00	–	cisa_kev
Citrix	Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778	27 Sep 202615:22	–	citrix
CVE	CVE-2026-88771	27 Sep 202616:02	–	cve
Cvelist	CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands	27 Sep 202616:02	–	cvelist
EUVD	EUVD-2026-87958	27 Sep 202616:02	–	euvd
NCSC	Vulnerabilities in NetScaler ADC and NetScaler Gateway	27 Sep 202616:55	–	ncsc
Tenable Nessus	NetScaler ADC and NetScaler Gateway 13.1 < 13.1-64.23 / 14.1 < 14.1-73.37 Multiple Vulnerabilities	27 Sep 202600:00	–	nessus

Vulners

Node

OR

citrix_systems netscaler_adcRange<14.1-73.37

citrix_systems netscaler_adcRange<13.1-64.23

citrix_systems netscaler_gatewayRange<14.1-73.37

citrix_systems netscaler_gatewayRange<13.1-64.23

citrix_systems netscaler_adc_fipsRange<13.1.37.279

citrix_systems netscaler_adc_ndcppRange<13.1.37.279

Source	Link
support	www.support.citrix.com/external/article/CTX697096/citrix-netscaler-adc-and-citrix-netscale.html
cisa	www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway
watchtowr	www.watchtowr.com/intelligence/citrix-netscaler-adc-citrix-netscaler-gateway-remote-code-execution-cve-2026-88771/
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

28 Sep 2026 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 210

CVSS 310

EPSS0.01063

NetScaler ADC NetScaler Gateway remote code execution insufficient input validation