{"schema":"vulnpedia.poc/1","cve":"CVE-2026-88771","generated":"2026-10-26T13:52:32.101Z","kev":{"since":"2026-09-27","ransomware":false},"epss":{"score":0.8216,"percentile":0.99652},"cvss":{"version":"4.0","score":9.5,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb","executable":true,"sourceId":"exploit/freebsd/http/citrix_netscaler_cve_2026_88771","description":"Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)","verification":"catalogued","source":"metasploit","modified":"2026-10-22 15:37:05 +0000","origins":[{"source":"metasploit","sourceId":"exploit/freebsd/http/citrix_netscaler_cve_2026_88771","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb"},{"source":"metasploit","sourceId":"exploit/freebsd/http/citrix_netscaler_cve_2026_88771","modified":"2026-10-22 15:37:05 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0a8c0d2742d5","executable":false,"sourceId":"0a8c0d2742d5","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0a8c0d2742d5","modified":"2026-09-27T00:00:00Z","url":"https://vulncheck.com/xdb/0a8c0d2742d5"}],"repositoryUrl":"https://github.com/craigsblackie/cve-2026-88771-netscaler"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3d8733b67bc2","executable":false,"sourceId":"3d8733b67bc2","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3d8733b67bc2","modified":"2026-09-27T00:00:00Z","url":"https://vulncheck.com/xdb/3d8733b67bc2"}],"repositoryUrl":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771"}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-88771%22&type=repositories","executable":false}],"poc_candidates":[{"url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771","source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-20T16:49:47Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-20T16:49:47Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771"}],"tags":[]},{"url":"https://github.com/technion/netscaler_scanner","source":"poc-in-github","sourceId":"CVE-2026-88771","description":"Tooling related to CVE-2026-88771 and CVE-2026-88772","modified":"2026-10-09T00:09:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/technion/netscaler_scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-09T00:09:24Z","url":"https://github.com/technion/netscaler_scanner"}],"tags":[]},{"url":"https://github.com/craigsblackie/cve-2026-88771-netscaler","source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-15T07:27:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/craigsblackie/cve-2026-88771-netscaler"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-15T07:27:16Z","url":"https://github.com/craigsblackie/cve-2026-88771-netscaler"}],"tags":[]},{"url":"https://github.com/ThomasPoppelgaard/netscaler-ctx697096-checker","source":"poc-in-github","sourceId":"CVE-2026-88771","description":"Am I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771–88778), CTX697174, CTX697191 (SAML RCE) and php2shell (management GUI): build, CVE preconditions, SAML, mgmt exposure, MFA, upgrade risks + IoC sweep with every public IoC (webshells, implants, 133 attacker IPs).","modified":"2026-10-24T01:23:59Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/ThomasPoppelgaard/netscaler-ctx697096-checker"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-24T01:23:59Z","url":"https://github.com/ThomasPoppelgaard/netscaler-ctx697096-checker"}],"tags":[]},{"url":"https://github.com/techupdate24/citrix-netscaler-cve-2026-88771-rce","source":"poc-in-github","sourceId":"CVE-2026-88771","description":"A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.","modified":"2026-09-28T11:37:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/techupdate24/citrix-netscaler-cve-2026-88771-rce"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-09-28T11:37:06Z","url":"https://github.com/techupdate24/citrix-netscaler-cve-2026-88771-rce"}],"tags":[]},{"url":"https://github.com/SwiftSecur/CVE-2026-88771-HuntScript","source":"poc-in-github","sourceId":"CVE-2026-88771","description":"A detection/hunting script for compromise related to CVE-2026-88771","modified":"2026-09-29T14:29:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/SwiftSecur/CVE-2026-88771-HuntScript"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-09-29T14:29:40Z","url":"https://github.com/SwiftSecur/CVE-2026-88771-HuntScript"}],"tags":[]},{"url":"https://github.com/bkchaudhari/NetScaler-CTX697096-Assessment-Script","source":"poc-in-github","sourceId":"CVE-2026-88771","description":"a practical NetScaler CTX697096 security-assessment workflow covering exposure validation, upgrade readiness and compromise-indicator hunting for CVE-2026-88771 through CVE-2026-88778.","modified":"2026-10-01T02:17:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/bkchaudhari/NetScaler-CTX697096-Assessment-Script"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-01T02:17:43Z","url":"https://github.com/bkchaudhari/NetScaler-CTX697096-Assessment-Script"}],"tags":[]},{"url":"https://github.com/emilstahl/pitscaler","source":"poc-in-github","sourceId":"CVE-2026-88771","description":"PitScaler: independent, source-linked briefing on Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 (CTX697096). https://pitscaler.com","modified":"2026-10-20T12:07:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/emilstahl/pitscaler"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-20T12:07:52Z","url":"https://github.com/emilstahl/pitscaler"}],"tags":[]},{"url":"https://github.com/orjanj/netscaler_threat_hunt_helper","source":"poc-in-github","sourceId":"CVE-2026-88771","description":"NetScaler CTX697096 Threat Hunt Helper (IoC scanner) - CVE-2026-88771, CVE-2026-88772, CVE-2026-88779","modified":"2026-10-21T19:37:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/orjanj/netscaler_threat_hunt_helper"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-21T19:37:31Z","url":"https://github.com/orjanj/netscaler_threat_hunt_helper"}],"tags":[]},{"url":"https://github.com/watchtowrlabs/citrix-netscaler-cve-2026-88771-iocs","source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-07T16:36:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/watchtowrlabs/citrix-netscaler-cve-2026-88771-iocs"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-07T16:36:41Z","url":"https://github.com/watchtowrlabs/citrix-netscaler-cve-2026-88771-iocs"}],"tags":[]},{"url":"https://github.com/grupooruss/netscaler-defensive-checker","source":"poc-in-github","sourceId":"CVE-2026-88771","description":"Defensive security checker for Citrix NetScaler ADC & Gateway — CVE-2026-88771 through CVE-2026-88778","modified":"2026-10-08T01:07:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/grupooruss/netscaler-defensive-checker"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-08T01:07:18Z","url":"https://github.com/grupooruss/netscaler-defensive-checker"}],"tags":[]},{"url":"https://github.com/CompleTetech-Security/netscaler-cve-2026-88771-check","source":"poc-in-github","sourceId":"CVE-2026-88771","description":"Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88771. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.","modified":"2026-10-26T05:11:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88771","url":"https://github.com/CompleTetech-Security/netscaler-cve-2026-88771-check"},{"source":"poc-in-github","sourceId":"CVE-2026-88771","modified":"2026-10-26T05:11:51Z","url":"https://github.com/CompleTetech-Security/netscaler-cve-2026-88771-check"}],"tags":[]}],"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-88771/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}]}