CRITICALCVSS 9.5KNOWN EXPLOITED

CVE-2026-88771

CVE-2026-88771 updated by NVD

Published: 2026-09-27
Modified: 2026-11-04
Sources: cisa-kev, nvd

Summary

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-88771

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.