CVE-2026-88773 — HTTP Request Smuggling

Description (CNA)

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.

Affected (CNA)

Vendor / product	Versions
Citrix NetScaler / ADC	affected 0 before 14.1-73.37; affected 0 before 13.1-64.23; affected 0 before 14.1-73.37 FIPS; affected 0 before 13.1-37.279 and NDcPP
Citrix NetScaler / Gateway	affected 0 before 14.1-73.37 FIPS; affected 0 before 13.1-64.23

CWE

CWE-444

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.