CVE-2026-88771

CRITICALCVSS 9.882% EPSSKEV — known exploited🧨 Public exploit (GreyNoise)

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

Published 2026-09-27 · last modified 2026-09-29

Affected products

VendorProduct
citrixnetscaler_application_delivery_controller
citrixnetscaler_gateway

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.