Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 27/09/2026, correctif exigé avant le 30/09/2026 pour les agences fédérales américaines.

Action requise : Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Description officielle (NVD)

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

Preuves de concept publiques (11)

Dépôts tiers non vérifiés, parfois piégés. Ne les exécutez jamais en production : uniquement dans un environnement de test isolé.

watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771 · ★ 22 · 27/09/2026
ThomasPoppelgaard/netscaler-ctx697096-checker · ★ 18 · 28/09/2026
Am I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771–88778), CTX697174, CTX697191 (SAML RCE) and php2shell (management GUI): build, CVE preconditions, SAML, mgmt
technion/netscaler_scanner · ★ 1 · 28/09/2026
Tooling related to CVE-2026-88771 and CVE-2026-88772
craigsblackie/cve-2026-88771-netscaler · ★ 1 · 28/09/2026
grupooruss/netscaler-defensive-checker · ★ 1 · 08/10/2026
Defensive security checker for Citrix NetScaler ADC & Gateway — CVE-2026-88771 through CVE-2026-88778
techupdate24/citrix-netscaler-cve-2026-88771-rce · ★ 0 · 28/09/2026
A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.
SwiftSecur/CVE-2026-88771-HuntScript · ★ 0 · 29/09/2026
A detection/hunting script for compromise related to CVE-2026-88771
bkchaudhari/NetScaler-CTX697096-Assessment-Script · ★ 0 · 01/10/2026
a practical NetScaler CTX697096 security-assessment workflow covering exposure validation, upgrade readiness and compromise-indicator hunting for CVE-2026-88771 through CVE-2026-88778.
emilstahl/pitscaler · ★ 0 · 01/10/2026
PitScaler: independent, source-linked briefing on Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 (CTX697096). https://pitscaler.com
orjanj/netscaler_threat_hunt_helper · ★ 0 · 01/10/2026
NetScaler CTX697096 Threat Hunt Helper (IoC scanner) - CVE-2026-88771, CVE-2026-88772, CVE-2026-88779

Les 10 dépôts les plus suivis sont affichés.

Références

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 , Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88771 , US Government Resource

En bref

Éditeur	Citrix
Produit	NetScaler
Publiée le	27/09/2026
Modifiée le	29/09/2026
CVSS	9.5 (v4.0)
EPSS	1,08 % (centile 65)
CWE	CWE-20

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS : probabilité estimée d'exploitation dans les 30 prochains jours.