Source: cisa.gov
Citrix NetScaler ADC and NetScaler Gateway contain a critical improper input validation vulnerability (CVE-2026-88771) that allows unauthenticated attackers to execute arbitrary commands. The vulnerability is part of a broader set of CVEs (CVE-2026-88771 through CVE-2026-88778) affecting Citrix NetScaler products. CISA has issued guidance requiring affected organizations to conduct forensic triage per BOD 26-04. Organizations are advised to run provided IOCs in the NetScaler console to identify indicators of exploitation. Citrix has published mitigation guidance and security bulletins addressing the vulnerability. The issue is considered high severity given its unauthenticated remote code execution potential. Customers must follow both Citrix's published guidance and CISA's BOD 26-04 directives for remediation and forensic triage.
