Weaponized CVE-2026-88771 Affects Citrix NetScaler ADC and Gateway

## Overview Citrix NetScaler ADC and Citrix NetScaler Gateway are affected by CVE-2026-88771. This vulnerability stems from improper input validation. It has been weaponized, and exploits are now publicly available. ## Technical Details The vulnerability affects multiple versions of Citrix NetScaler ADC and Gateway. Specifically, it impacts ADC versions prior to 14.1-73.37 and 13.1-64.23. It also affects FIPS versions before 14.1-73.37 FIPS and 13.1.37.279 FIPS and NDcPP. For the Gateway, the vulnerable versions are before 14.1-73.37 and 13.1-64.23. The flaw allows an unauthenticated attacker to execute arbitrary commands on the affected systems. ## Impact Successful exploitation of CVE-2026-88771 can lead to severe consequences. Attackers can gain control of the affected systems, potentially compromising sensitive data and disrupting services. The CVSS score of 9.5 indicates a critical level of risk associated with this vulnerability. ## Mitigation Defenders should prioritize patching affected systems. Citrix has released updates that address this vulnerability. Ensure that all Citrix NetScaler ADC and Gateway installations are updated to the latest versions: 14.1-73.37 or later for ADC and 13.1-64.23 or later for Gateway. Regularly monitor systems for any signs of exploitation and review security configurations to minimize exposure.