{"schema":"vulnpedia.poc/1","cve":"CVE-2026-88772","generated":"2026-10-26T13:52:32.101Z","kev":{"since":"2026-09-27","ransomware":false},"epss":{"score":0.78162,"percentile":0.99575},"cvss":{"version":"4.0","score":9.5,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb","executable":true,"sourceId":"exploit/freebsd/http/citrix_netscaler_cve_2026_88771","description":"Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)","verification":"catalogued","source":"metasploit","modified":"2026-10-22 15:37:05 +0000","origins":[{"source":"metasploit","sourceId":"exploit/freebsd/http/citrix_netscaler_cve_2026_88771","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb"},{"source":"metasploit","sourceId":"exploit/freebsd/http/citrix_netscaler_cve_2026_88771","modified":"2026-10-22 15:37:05 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/84f2fab3a46b","executable":false,"sourceId":"84f2fab3a46b","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"84f2fab3a46b","modified":"2026-09-27T00:00:00Z","url":"https://vulncheck.com/xdb/84f2fab3a46b"}],"repositoryUrl":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772"}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-88772%22&type=repositories","executable":false}],"poc_candidates":[{"url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772","source":"poc-in-github","sourceId":"CVE-2026-88772","modified":"2026-10-16T10:16:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88772","url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772"},{"source":"poc-in-github","sourceId":"CVE-2026-88772","modified":"2026-10-16T10:16:46Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772"}],"tags":[]},{"url":"https://github.com/murrez/CVE-2026-88772","source":"poc-in-github","sourceId":"CVE-2026-88772","description":"CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP/443 DTLS probe. CTX697096; active exploitation reported. https://pocbit.org/pocs/cve-2026-88772","modified":"2026-10-20T16:49:47Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88772","url":"https://github.com/murrez/CVE-2026-88772"},{"source":"poc-in-github","sourceId":"CVE-2026-88772","modified":"2026-10-20T16:49:47Z","url":"https://github.com/murrez/CVE-2026-88772"}],"tags":[]},{"url":"https://github.com/FollowerSeize/CVE-2026-88772-POC","source":"poc-in-github","sourceId":"CVE-2026-88772","description":"CVE-2026-88772 - Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS)","modified":"2026-09-28T09:58:26Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88772","url":"https://github.com/FollowerSeize/CVE-2026-88772-POC"},{"source":"poc-in-github","sourceId":"CVE-2026-88772","modified":"2026-09-28T09:58:26Z","url":"https://github.com/FollowerSeize/CVE-2026-88772-POC"}],"tags":[]},{"url":"https://github.com/CompleTetech-Security/netscaler-cve-2026-88772-check","source":"poc-in-github","sourceId":"CVE-2026-88772","description":"Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.","modified":"2026-10-26T05:03:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88772","url":"https://github.com/CompleTetech-Security/netscaler-cve-2026-88772-check"},{"source":"poc-in-github","sourceId":"CVE-2026-88772","modified":"2026-10-26T05:03:58Z","url":"https://github.com/CompleTetech-Security/netscaler-cve-2026-88772-check"}],"tags":[]}],"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-88772/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}]}