DeutschShown in its original language — a full translation is planned for a future version.
Citrix NetScaler ADC und Citrix NetScaler Gateway: Mehrere Schwachstellen
view advisory published 2026-09-27
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Citrix NetScaler ADC und Citrix NetScaler Gateway ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand auszulösen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und weitere, nicht näher bezeichnete Auswirkungen zu erzielen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-88778US | high7.5 | — | ||
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, befo… | ||||
| CVE-2026-88777US | critical9.8 | — | ||
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 F… | ||||
| CVE-2026-88776US | critical9.8 | Exploit | ||
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FI… | ||||
| CVE-2026-88775US | critical9.8 | — | ||
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and befor… | ||||
| CVE-2026-88774US | high7.2 | — | ||
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FI… | ||||
| CVE-2026-88773US | critical10.0 | Exploit | ||
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before… | ||||
| CVE-2026-88772US | high8.1OT critical | KEV | ||
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FI… | ||||
| CVE-2026-88771US | critical9.8OT critical | KEV | ||
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS,… | ||||
02
references
External citations — patches, advisories, analysis.
- CERT-EU: 2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway vom 2026-09-27external
- Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771 through CVE-2026-88778 vom 2026-09-27external
- Watchtowr Labs vom 2026-09-28external
- Inside the NetScaler Zero-Day Siege: Chained Pre-Auth RCEs Weaponized in the Wild vom 2026-09-27external
- Citrix Security Bulletin CTX697096 vom 2026-09-27external
- WID-SEC-W-2026-3587 - CSAF Versionself
- WID-SEC-2026-3587 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan