CVE-2026-88773
CRITICALCVSS 10.0Description
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.
Timeline
Published:September 27th, 2026 5:16 PM
Last modified:September 29th, 2026 4:17 PM
CVSS Scoring
CVSS v3: 10.0 (CRITICAL)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Affected Software
From NVD CPE configuration data
Vendors
citrix
Products
netscaler_application_delivery_controllernetscaler_gateway
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute