CVE-2026-88771 Citrix NetScaler ADC
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before…
- CVSS
- 9.5 Critical
- EPSS
- 82%
- Percentile
- 100
- Published
- 2026-09-27
- Force
- 11 of 12
- Public PoC
- 12
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
On CISA’s exploited list
Citrix NetScaler Improper Input Validation Vulnerability
- Added
- 2026-09-27
- Federal patch deadline
- 2026-09-30
- Ransomware use
- not known