Multiples vulnérabilités dans Citrix NetScaler ADC et Gateway

{
  "id": "5b87fde0f4e892c6a8d2096e46509585ec56cdbba392954edf91e488efee0690",
  "url": "https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-011/",
  "method": "llm",
  "payload": {
    "kind": "advisory",
    "title": "Multiples vulnérabilités dans Citrix NetScaler ADC et Gateway",
    "summary": "Citrix NetScaler ADC and Gateway are affected by vulnerabilities that can enable remote code execution or denial of service. The CERT-FR reports active exploitation of CVE-2026-88771 and CVE-2026-88772, and updates the bulletin to include CVE-2026-88779. Consult the vendor bulletins for fixes.",
    "evidence": "Parmi celles-ci, les vulnérabilités CVE-2026-88771 et CVE-2026-88772 permettent une exécution de code arbitraire à distance par un attaquant non authentifié. Ces vulnérabilités sont activement exploitées",
    "products": [
      {
        "name": {
          "value": "NetScaler ADC",
          "evidence": "NetScaler ADC versions 13.1.x antérieures à 13.1-64.28"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "13.1-NDcPP 13.1-37.282",
            "evidence": "NetScaler ADC versions 13.1-FIPS antérieures à 13.1-NDcPP 13.1-37.282"
          },
          {
            "value": "13.1-64.28",
            "evidence": "NetScaler ADC versions 13.1.x antérieures à 13.1-64.28"
          },
          {
            "value": "14.1-73.41 FIPS",
            "evidence": "NetScaler ADC versions 14.1-FIPS antérieures à 14.1-73.41 FIPS"
          },
          {
            "value": "14.1-73.41",
            "evidence": "NetScaler ADC versions 14.1.x antérieures à 14.1-73.41"
          }
        ],
        "affected_versions": [
          {
            "value": "13.1-FIPS antérieures à 13.1-NDcPP 13.1-37.282",
            "evidence": "NetScaler ADC versions 13.1-FIPS antérieures à 13.1-NDcPP 13.1-37.282"
          },
          {
            "value": "13.1.x antérieures à 13.1-64.28",
            "evidence": "NetScaler ADC versions 13.1.x antérieures à 13.1-64.28"
          },
          {
            "value": "14.1-FIPS antérieures à 14.1-73.41 FIPS",
            "evidence": "NetScaler ADC versions 14.1-FIPS antérieures à 14.1-73.41 FIPS"
          },
          {
            "value": "14.1.x antérieures à 14.1-73.41",
            "evidence": "NetScaler ADC versions 14.1.x antérieures à 14.1-73.41"
          }
        ]
      },
      {
        "name": {
          "value": "NetScaler Gateway",
          "evidence": "NetScaler Gateway versions 13.1.x antérieures à 13.1-64.28"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "13.1-64.28",
            "evidence": "NetScaler Gateway versions 13.1.x antérieures à 13.1-64.28"
          },
          {
            "value": "14.1-73.41",
            "evidence": "NetScaler Gateway versions 14.1.x antérieures à 14.1-73.41"
          }
        ],
        "affected_versions": [
          {
            "value": "13.1.x antérieures à 13.1-64.28",
            "evidence": "NetScaler Gateway versions 13.1.x antérieures à 13.1-64.28"
          },
          {
            "value": "14.1.x antérieures à 14.1-73.41",
            "evidence": "NetScaler Gateway versions 14.1.x antérieures à 14.1-73.41"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-88771",
        "evidence": "les vulnérabilités CVE-2026-88771 et CVE-2026-88772"
      },
      {
        "value": "CVE-2026-88772",
        "evidence": "les vulnérabilités CVE-2026-88771 et CVE-2026-88772"
      },
      {
        "value": "CVE-2026-88779",
        "evidence": "une nouvelle vulnérabilité (CVE-2026-88779) permettant un déni de service à distance."
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-cert-fr-alerts",
  "document_id": 23320,
  "published_at": "2026-09-28T00:00:00+00:00"
}