CVE-2026-88771

Citrix NetScaler ADC

Prioridad media: es grave, pero no se conoce explotación

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

En las noticias

• CISA da de plazo hasta el 30 de septiembre para parchear dos fallos críticos en Citrix NetScaler ya explotados · Una al día
• Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug · SecurityWeek
• CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally · The Hacker News
• Múltiples vulnerabilidades en productos de Citrix · INCIBE-CERT