CVE-2026-88773Vulnerability

1. “CVE-2026-88773”

   watchTowr LabsVendor29 Sep 2026
   Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

2. “Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778”

   Palo Alto Unit 42Vendor28 Sep 2026
   Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild

3. “Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778”

   Canadian Centre for Cyber SecurityGovernment28 Sep 2026
   Citrix security advisory (AV26-965)

4. “CVE-2026-88773”

   Rapid7Vendor28 Sep 2026
   Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

5. “Also noteworthy is CVE-2026-88773, a critical HTTP request smuggling flaw which is present when the HTTP configuration is enabled on NetScaler ADC or NetScaler Gateway.”

   Infosecurity MagazineNews28 Sep 2026
   Citrix Patches Critical Zero Days Under Active Exploitation

6. “CVE-2026-88773”

   SOCRadarVendor28 Sep 2026
   Citrix NetScaler Zero-Days FAQ: CVE-2026-88771 & 88772

7. “CVE-2026-88773: vulnerabilidad de contrabando de peticiones HTTP causada por una interpretación incoherente de las solicitudes HTTP.”

   INCIBE-CERTGovernment28 Sep 2026
   Múltiples vulnerabilidades en productos de Citrix

8. “Those risk management efforts will also have to consider a third critical vulnerability, the 9.3-rated CVE-2026-88773, allows HTTP request smuggling – an attack technique that can bypass security controls installed on front-end servers.”

   The Register (security)News28 Sep 2026
   Certainties in life: Death, taxes, and critical Citrix vulns under attack

9. “The remaining six vulnerabilities (CVE-2026-88773 through CVE-2026-88778) have been assigned CVSS scores ranging from 7.0 to 9.3.”

   Sophos X-OpsVendor28 Sep 2026
   Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation

10. “Référence CVE CVE-2026-88773”

    CERT-FRGovernment28 Sep 2026
    Multiples vulnérabilités dans Citrix NetScaler ADC et Gateway (28 septembre 2026)

11. “Drie kwetsbaarheden met kenmerk CVE-2026-88771, CVE-2026-88772 en CVE-2026-88773 zijn als kritiek aangemerkt.”

    NCSC-NL advisoriesGovernment27 Sep 2026
    NCSC-2026-0394 [1.00] [H/H] Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway

12. “…e of eight new vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway products: CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778.”

    CISA advisoriesGovernment27 Sep 2026
    Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

• hxxps://support.citrix[.]com/support-home/kbsearch/article?articleNumber=CTX697096&articleURL=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778in 1 report
• hxxps://community.citrix[.]com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778/#Indicators_of_Compromise__cabcb4in 1 report

Also named with it: CVE-2026-88771, CVE-2026-88772, CVE-2026-88778, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777