CVE-2026-88773
HTTP Request Smuggling
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 14.1-73.37, 13.1-64.23, 14.1-73.37 FIPS, 13.1-37.279 and NDcPP
- Public exploit
- None on Exploit-DB
CISA SSVC
- Exploitation: none
- Automatable: yes
- Technical impact: partial
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.
Affected versions
- Citrix NetScaler ADC
fixed in 14.1-73.37; fixed in 13.1-64.23; fixed in 14.1-73.37 FIPS; fixed in 13.1-37.279 and NDcPP
- Citrix NetScaler Gateway
fixed in 14.1-73.37 FIPS; fixed in 13.1-64.23