Firetruck

CVE-2026-88771

KEV
Updated Sep 29, 2026 · PUBLISHED
View KEV entry →

Description

Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
ADCCitrix NetScaler / ADC>= 0, < 14.1-73.37affected
ADCCitrix NetScaler / ADC>= 0, < 13.1-64.23affected
ADCCitrix NetScaler / ADC>= 0, < 14.1-73.37 FIPSaffected
ADCCitrix NetScaler / ADC>= 0, < 13.1.37.279 FIPS and NDcPPaffected
GatewayCitrix NetScaler / Gateway>= 0, < 14.1-73.37affected
GatewayCitrix NetScaler / Gateway>= 0, < 13.1-64.23affected