CVE-2026-88774

Citrix NetScaler ADC

Medium priority: severe, but no known exploitation

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression usage.

In the news

• Múltiples vulnerabilidades en productos de Citrix · INCIBE-CERT