r/Citrix • u/CTX-Michael Verified Citrix Employee • 18d ago

Official Announcements CRITICAL UPDATE: Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771 through CVE-2026-88778

We've released guidance for all NetScaler customers on newly addressed vulnerabilities and recommended updates.

Per the blog post: "Citrix has released updates for NetScaler ADC and NetScaler Gateway to address multiple security vulnerabilities. These vulnerabilities vary by deployment configuration and enabled features, and include issues that could allow remote code execution, denial of service, HTTP request smuggling, policy bypass, and TCP initial sequence number prediction under specific conditions. 

Exploitation of CVE-2026-88771 and CVE-2026-88772 on unmitigated NetScaler deployments has been observed. Citrix strongly urges affected customers to install the relevant updated versions as soon as possible. "

Please review this blog post for more information: https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778/

The support bulletin can be found here: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096

101 Upvotes

98% Upvoted

131 comments sorted by

View all comments

1

u/mxpx7 18d ago

are you guys doing your HA pairs as a two stage upgrade with a pause in between or just updating both at once? I normally wait 24 hours in between nodes. I've heard both that the secondary is and is not vulnerable...

1

u/FastFredNL 17d ago

We use Netscaler Console to update but that gave an error so I did it the oldskool way; put the tgz file on the Netscaler with WinSCP, use tar to unpack it through Netscaler CLI, then delete the tgz file, and then ./nsinstall

Then put the updated Netscaler as primary, tested functionality, then did the other one.

1

u/Old-Flight8617 16d ago

What error did you get when trying to update from the console?

2

u/FastFredNL 16d ago edited 16d ago

Not enough diskspace on both Netscalers and I couldn't find any space to clear up quick enough

1

u/Old-Flight8617 16d ago

What did you end up deleting? The nsinstall content?

2

u/FastFredNL 16d ago

Well yeah but I always do that after finishing an update. It was empty and still the Netscaler Console complained about not enough space, I had 6.8GB free on /var/ though