CVE-2026-88773

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC versions prior to 14.1-73.37 Citrix NetScaler ADC versions prior to 13.1-64.23 Citrix NetScaler ADC versions prior to 14.1-73.37 FIPS Citrix NetScaler ADC versions prior to 13.1-37.279 Citrix NetScaler ADC NDcPP (affected versions not specified) Citrix NetScaler Gateway versions prior to 14.1-73.37 FIPS Citrix NetScaler Gateway versions prior to 13.1-64.23

Description An issue exists involving the inconsistent interpretation of HTTP requests, leading to HTTP Request/Response smuggling. This occurs when there is a discrepancy in how a front-end proxy and a back-end server process the same HTTP request, potentially allowing an attacker to interfere with the way a website processes sequences of HTTP requests.

Recommendations Update Citrix NetScaler ADC to version 14.1-73.37 or later. Update Citrix NetScaler ADC to version 13.1-64.23 or later. Update Citrix NetScaler ADC FIPS to version 14.1-73.37 or later. Update Citrix NetScaler ADC to version 13.1-37.279 or later. Update Citrix NetScaler Gateway FIPS to version 14.1-73.37 or later. Update Citrix NetScaler Gateway to version 13.1-64.23 or later.