← CVE Intelligence

CVE-2026-88771

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands PUBLISHED

Description (CNA)

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

Affected (CNA)

Vendor / productVersions
Citrix NetScaler / ADCaffected 0 before 14.1-73.37; affected 0 before 13.1-64.23; affected 0 before 14.1-73.37 FIPS; affected 0 before 13.1.37.279 FIPS and NDcPP
Citrix NetScaler / Gatewayaffected 0 before 14.1-73.37; affected 0 before 13.1-64.23

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.