Back to the CVE list
CVE-2026-88771 CISA KEV · Actively exploitedSuited to automated attack · CISA

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

CVSS score

9.5

EPSS probability

%1.1

Risk score

0.2

Published

18 d ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Am I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771–88778), CTX697174 (CVE-2026-88779) and CTX697191 (CVE-2026-107406, SAML RCE): build, CVE preconditions, SAML IdP/SP, Enhanced ISN, upgrade risks + IoC sweep by default with every public IoC (webshells, implants, 132 attacker IPs).

Public PoCSource updated: 09.10.2026 11:15:39

watchtowrlabs/citrix-netscaler-cve-2026-88771-iocs

Public PoCSource updated: 07.10.2026 16:36:41

A detection/hunting script for compromise related to CVE-2026-88771

Public PoCSource updated: 29.09.2026 14:29:40

craigsblackie/cve-2026-88771-netscaler

Public PoCSource updated: 15.10.2026 07:27:16

Defensive security checker for Citrix NetScaler ADC & Gateway — CVE-2026-88771 through CVE-2026-88778

Public PoCSource updated: 08.10.2026 00:43:03

Tooling related to CVE-2026-88771 and CVE-2026-88772

Public PoCSource updated: 28.09.2026 04:56:11

watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771

Public PoCSource updated: 27.09.2026 18:15:38

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-88771"