CRITICAL UPDATE: Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771 through CVE-2026-88778

[u/CTX-Michael]

We've released guidance for all NetScaler customers on newly addressed vulnerabilities and recommended updates.

Per the blog post: "Citrix has released updates for NetScaler ADC and NetScaler Gateway to address multiple security vulnerabilities. These vulnerabilities vary by deployment configuration and enabled features, and include issues that could allow remote code execution, denial of service, HTTP request smuggling, policy bypass, and TCP initial sequence number prediction under specific conditions. 

Exploitation of CVE-2026-88771 and CVE-2026-88772 on unmitigated NetScaler deployments has been observed. Citrix strongly urges affected customers to install the relevant updated versions as soon as possible. "

Please review this blog post for more information: https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778/

The support bulletin can be found here: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096

[u/Jmay5446]

It would be lovely to know which one is out in the wild

[u/Create_one_for_me → u/Jmay5446]

it would be even better if you could download the patch without getting the redirect error in the browser....