Citrix NetScaler vulnerabilities
Published CVEs affecting Citrix NetScaler products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-88771
Critical · 9.8
KEV High · 64 Public exploit CWE-20 Sep 27, 2026
Citrix NetScaler Improper Input Validation Vulnerability
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.
CVE-2026-88772
High · 8.1
KEV High · 57 Public exploit CWE-119 Sep 27, 2026
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service