Feed/CVE-2026-88771
CVE-2026-88771CRITICALCVSS 9.8CISA KEV: Actively Exploited

CVE-2026-88771

Published Sep 27, 2026·Updated Sep 29, 2026

NVD Description

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

Public Exploits & PoCs9 found

PoC: netscaler-defensive-checker

Defensive security checker for Citrix NetScaler ADC & Gateway — CVE-2026-88771 through CVE-2026-88778

1

[POC] CVE-2026-88771 — citrix-netscaler-cve-2026-88771-rce

A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.

[POC] CVE-2026-88771 — netscaler-ctx697096-checker

Read-only checker for Citrix NetScaler ADC/Gateway bulletin CTX697096 (CVE-2026-88771 – 88778): build, all 8 CVE preconditions, admin partitions, Enhanced ISN, upgrade risks, and optional community IoC checks. Not a replacement for Citrix's official IoC scan.

[POC] CVE-2026-88771 — CVE-2026-88771-POC

Improper Input Validation (CWE-20) SSVC Scores Exploitation: Active Technical Impact: Total

[POC] CVE-2026-88771 — netscaler_scanner

Tooling related to CVE-2026-88771 and CVE-2026-88772

PoC: netscaler_threat_hunt_helper

NetScaler CTX697096 Threat Hunt Helper (IoC scanner) - CVE-2026-88771, CVE-2026-88772

PoC: pitscaler

PitScaler: independent, source-linked briefing on Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 (CTX697096). https://pitscaler.com

PoC: NetScaler-CTX697096-Assessment-Script

a practical NetScaler CTX697096 security-assessment workflow covering exposure validation, upgrade readiness and compromise-indicator hunting for CVE-2026-88771 through CVE-2026-88778.

PoC: CVE-2026-88771-HuntScript

A detection/hunting script for compromise related to CVE-2026-88771

Community Discussion

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free