Last reviewed
Patch
Citrix NetScaler command execution
CVE-2026-88771
An unauthenticated attacker can execute commands on affected NetScaler ADC and Gateway appliances, including default configurations.
Risk
Citrix reports exploitation of unmitigated appliances. Attackers can compromise affected gateways before sign-in, including deployments using the default configuration.
Recommended action
Update affected appliances using Citrix's bulletin. Investigate suspected compromise using the vendor's incident-response guidance.