CVE-2026-88771

🗓️ 27 Sep 2026 16:02:07Reported by NetScalerType

cve🔗 web.nvd.nist.gov📰️ 56 Media mentions👁 250 Views

Unauthenticated RCE in Citrix NetScaler ADC and Gateway via improper input validation.

Reporter	Title	Published	Views	Family All 34
GithubExploit	Exploit for CVE-2026-88772	27 Sep 202620:24	–	githubexploit
GithubExploit	lvx-vuln-research	9 Oct 202607:37	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Citrix Netscaler_Application_Delivery_Controller	1 Oct 202610:40	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Citrix Netscaler_Application_Delivery_Controller	29 Sep 202614:28	–	githubexploit
BDU FSTEC	NetScaler ADC Access Control Command Execution	28 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-88771	27 Sep 202609:09	–	circl
CISA KEV Catalog	Citrix NetScaler Improper Input Validation Vulnerability	27 Sep 202600:00	–	cisa_kev
CISA	Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway	9 Oct 202612:00	–	cisa
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	27 Sep 202612:00	–	cisa
Citrix	Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778	27 Sep 202615:22	–	citrix

NVD

Node

citrix netscaler_application_delivery_controllerRange13.1–13.1-64.23-

citrix netscaler_application_delivery_controllerRange13.1–13.1.37.279fips

citrix netscaler_application_delivery_controllerRange13.1–13.1.37.279ndcpp

citrix netscaler_application_delivery_controllerRange14.1–14.1-73.37-

citrix netscaler_application_delivery_controllerRange14.1-66.68–14.1-73.37fips

citrix netscaler_gatewayRange13.1–13.1-64.23

citrix netscaler_gatewayRange14.1–14.1-73.37

[
  {
    "vendor": "Citrix NetScaler",
    "product": "ADC",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "14.1-73.37",
        "versionType": "patch"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "13.1-64.23",
        "versionType": "patch"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "14.1-73.37 FIPS",
        "versionType": "patch"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "13.1.37.279 FIPS and NDcPP",
        "versionType": "patch"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Citrix NetScaler",
    "product": "Gateway",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "14.1-73.37",
        "versionType": "patch"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "13.1-64.23",
        "versionType": "patch"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
support	www.support.citrix.com/support-home/kbsearch/article
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

29 Sep 2026 04:18Current

9.2Critical risk

Vulners AI Score9.2

CVSS 3.19.8

CVSS 49.5

EPSS0.01083

SSVC