ID:13131 - Exploit for Inconsistent interpretation of HTTP requests in Citrix Netscaler ADC and Citrix NetScaler Gateway - CVE-2026-88773

 
Main Vulnerability Database Exploits ID:13131 - Exploit for Inconsistent interpretation of HTTP requests in Citrix Netscaler ADC and Citrix NetScaler Gateway - CVE-2026-88773

ID:13131 - Exploit for Inconsistent interpretation of HTTP requests in Citrix Netscaler ADC and Citrix NetScaler Gateway - CVE-2026-88773

Published: October 23, 2026


Vulnerability identifier: #VU152293
Vulnerability risk: High
CVE-ID: CVE-2026-88773
CWE-ID: CWE-444
Exploitation vector: Remote access
Vulnerable software:
Citrix Netscaler ADC
Citrix NetScaler Gateway

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to modify information.

The vulnerability exists due to inconsistent interpretation of HTTP requests in HTTP configuration when handling HTTP requests. A remote attacker can send a smuggled HTTP request to modify information.

HTTP configuration must be enabled.


Remediation

Install security update from vendor's website.