CVE-2026-88773
9.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N
Summary
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Citrix NetScaler | ADC | 0 < 14.1-73.37 | affected |
| Citrix NetScaler | ADC | 0 < 13.1-64.23 | affected |
| Citrix NetScaler | ADC | 0 < 14.1-73.37 FIPS | affected |
| Citrix NetScaler | ADC | 0 < 13.1-37.279 and NDcPP | affected |
| Citrix NetScaler | Gateway | 0 < 14.1-73.37 FIPS | affected |
| Citrix NetScaler | Gateway | 0 < 13.1-64.23 | affected |
Weaknesses
- CWE-444: CWE-444 Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling')
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.