CVE coverage
View on NVD →
CVE-2026-88771
CVSS 9.8
Actively exploited (KEV)
1 detection found
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential NetScaler Log Poisoning Command Injection Attempt | production | 2026-10-23 |