{"schema":"vulnpedia.research/1","cve":"CVE-2026-88772","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778","tags":["Vendor Advisory"],"source":"mitre","sourceId":"NetScaler","modified":"2026-09-27T16:09:56.033Z","origins":[{"source":"mitre","sourceId":"NetScaler","modified":"2026-09-27T16:09:56.033Z","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"},{"source":"nvd","sourceId":"CVE-2026-88772","modified":"2026-09-28T12:26:47.670","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-28T03:55:42.777Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-28T03:55:42.777Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772"},{"source":"nvd","sourceId":"CVE-2026-88772","modified":"2026-09-28T12:26:47.670","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772"}]},{"source":"euvd","sourceId":"EUVD-2026-87959","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87959","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-87959","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87959"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://support.citrix.com/external/article/CTX697096","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://support.citrix.com/external/article/CTX697096"}]},{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/"}]},{"url":"https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances/"}]},{"url":"https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-citrix-netscaler-adc-and-gateway-cve-2026-88771-and-cve-2026-88772/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-citrix-netscaler-adc-and-gateway-cve-2026-88771-and-cve-2026-88772/"}]},{"url":"https://asec.ahnlab.com/en/95733/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://asec.ahnlab.com/en/95733/"}]},{"url":"https://watchtowr.com/intelligence/post-exploitation-analysis-artifacts-citrix-netscaler-cve-2026-88771/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://watchtowr.com/intelligence/post-exploitation-analysis-artifacts-citrix-netscaler-cve-2026-88771/"}]},{"url":"https://binarydefense.com/resources/blog/platypwned-when-a-citrix-0-day-lays-an-egg","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://binarydefense.com/resources/blog/platypwned-when-a-citrix-0-day-lays-an-egg"}]},{"url":"https://www.recordedfuture.com/blog/september-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://www.recordedfuture.com/blog/september-2026-cve-landscape"}]},{"url":"https://vulncheck.com/xdb/84f2fab3a46b","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"84f2fab3a46b","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"84f2fab3a46b","modified":"2026-09-27T00:00:00Z","url":"https://vulncheck.com/xdb/84f2fab3a46b"}]},{"url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"84f2fab3a46b","modified":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"84f2fab3a46b","modified":"2026-09-27T00:00:00Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772","source":"poc-in-github","sourceId":"CVE-2026-88772","modified":"2026-10-16T10:16:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88772","url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772"},{"source":"poc-in-github","sourceId":"CVE-2026-88772","modified":"2026-10-16T10:16:46Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772"}],"tags":[]},{"url":"https://github.com/murrez/CVE-2026-88772","source":"poc-in-github","sourceId":"CVE-2026-88772","description":"CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP/443 DTLS probe. CTX697096; active exploitation reported. https://pocbit.org/pocs/cve-2026-88772","modified":"2026-10-20T16:49:47Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88772","url":"https://github.com/murrez/CVE-2026-88772"},{"source":"poc-in-github","sourceId":"CVE-2026-88772","modified":"2026-10-20T16:49:47Z","url":"https://github.com/murrez/CVE-2026-88772"}],"tags":[]},{"url":"https://github.com/FollowerSeize/CVE-2026-88772-POC","source":"poc-in-github","sourceId":"CVE-2026-88772","description":"CVE-2026-88772 - Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS)","modified":"2026-09-28T09:58:26Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88772","url":"https://github.com/FollowerSeize/CVE-2026-88772-POC"},{"source":"poc-in-github","sourceId":"CVE-2026-88772","modified":"2026-09-28T09:58:26Z","url":"https://github.com/FollowerSeize/CVE-2026-88772-POC"}],"tags":[]},{"url":"https://github.com/CompleTetech-Security/netscaler-cve-2026-88772-check","source":"poc-in-github","sourceId":"CVE-2026-88772","description":"Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.","modified":"2026-10-26T05:03:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-88772","url":"https://github.com/CompleTetech-Security/netscaler-cve-2026-88772-check"},{"source":"poc-in-github","sourceId":"CVE-2026-88772","modified":"2026-10-26T05:03:58Z","url":"https://github.com/CompleTetech-Security/netscaler-cve-2026-88772-check"}],"tags":[]}],"cataloguedPoc":[{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb","source":"metasploit","sourceId":"exploit/freebsd/http/citrix_netscaler_cve_2026_88771","description":"Citrix NetScaler Unauthenticated Login Log Command Injection (CVE-2026-88771)","modified":"2026-10-22 15:37:05 +0000","kind":"metasploit","verification":"catalogued","origins":[{"source":"metasploit","sourceId":"exploit/freebsd/http/citrix_netscaler_cve_2026_88771","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb"},{"source":"metasploit","sourceId":"exploit/freebsd/http/citrix_netscaler_cve_2026_88771","modified":"2026-10-22 15:37:05 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_netscaler_cve_2026_88771.rb"}],"tags":[]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"84f2fab3a46b","url":"https://vulncheck.com/xdb/84f2fab3a46b","cve":"CVE-2026-88772","dateAdded":"2026-09-27T18:15:55Z","modified":"2026-09-27T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772","observations":[{"dateAdded":"2026-09-27T18:15:55Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"84f2fab3a46b","modified":"2026-09-27T00:00:00Z","url":"https://vulncheck.com/xdb/84f2fab3a46b"}]}],"vendorStatements":[],"exploitationSources":[{"source":"euvd","sourceId":"EUVD-2026-87959","catalog":"ENISA EU KEV","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87959","dateAdded":"2026-09-27","origins":[{"source":"euvd","sourceId":"EUVD-2026-87959","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87959"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-09-27T00:00:00Z","modified":"2026-09-27T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Citrix","product":"NetScaler ADC and NetScaler Gateway","dueDate":"2026-09-30T00:00:00Z","cisaDateAdded":"2026-09-27T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","modified":"2026-09-27T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","catalog":"VulnCheck KEV","kind":"report","url":"https://support.citrix.com/external/article/CTX697096","dateAdded":"2026-09-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","url":"https://support.citrix.com/external/article/CTX697096"},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","catalog":"VulnCheck KEV","kind":"report","url":"https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/","dateAdded":"2026-09-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","url":"https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","catalog":"VulnCheck KEV","kind":"report","url":"https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances/","dateAdded":"2026-09-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","url":"https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","catalog":"VulnCheck KEV","kind":"report","url":"https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-citrix-netscaler-adc-and-gateway-cve-2026-88771-and-cve-2026-88772/","dateAdded":"2026-10-06T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","url":"https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-citrix-netscaler-adc-and-gateway-cve-2026-88771-and-cve-2026-88772/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","catalog":"VulnCheck KEV","kind":"report","url":"https://asec.ahnlab.com/en/95733/","dateAdded":"2026-10-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","url":"https://asec.ahnlab.com/en/95733/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","url":"https://watchtowr.com/intelligence/post-exploitation-analysis-artifacts-citrix-netscaler-cve-2026-88771/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","catalog":"VulnCheck KEV","kind":"report","url":"https://binarydefense.com/resources/blog/platypwned-when-a-citrix-0-day-lays-an-egg","dateAdded":"2026-10-13T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","url":"https://binarydefense.com/resources/blog/platypwned-when-a-citrix-0-day-lays-an-egg"},{"source":"vulncheck-kev","sourceId":"CVE-2026-88772","url":"https://www.recordedfuture.com/blog/september-2026-cve-landscape"}]}]}