CVE-2026-88773

CRITICALCVSS 10.03% EPSS🧨 Public exploit (GreyNoise)

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.

Published 2026-09-27 · last modified 2026-09-29

Affected products

VendorProduct
citrixnetscaler_application_delivery_controller
citrixnetscaler_gateway

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.