{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Citrix NetScaler ADC versions 14.1-FIPS ant\u00e9rieures \u00e0 14.1-73.37 FIPS","product":{"name":"NetScaler ADC","vendor":{"name":"Citrix","scada":false}}},{"description":"Citrix NetScaler ADC versions 13.1-FIPS ant\u00e9rieures \u00e0 13.1-NDcPP 13.1.37.279","product":{"name":"NetScaler ADC","vendor":{"name":"Citrix","scada":false}}},{"description":"NetScaler Gateway versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.23","product":{"name":"NetScaler Gateway","vendor":{"name":"Citrix","scada":false}}},{"description":"NetScaler Gateway versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.37","product":{"name":"NetScaler Gateway","vendor":{"name":"Citrix","scada":false}}},{"description":"Citrix NetScaler ADC versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.37","product":{"name":"NetScaler ADC","vendor":{"name":"Citrix","scada":false}}},{"description":"Citrix NetScaler ADC versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.23","product":{"name":"NetScaler ADC","vendor":{"name":"Citrix","scada":false}}}],"affected_systems_content":"","closed_at":null,"content":"## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des correctifs (cf. section Documentation).","cves":[{"name":"CVE-2026-88771","url":"https://www.cve.org/CVERecord?id=CVE-2026-88771"},{"name":"CVE-2026-88772","url":"https://www.cve.org/CVERecord?id=CVE-2026-88772"}],"links":[{"title":"Billet de blogue Citrix du 27 septembre 2026","url":"https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778/#Indicators_of_Compromise__cabcb4"},{"title":"Avis CERT-FR CERTFR-2026-AVI-1235 du 28 septembre 2026","url":"/avis/CERTFR-2026-AVI-1235/"}],"reference":"CERTFR-2026-ALE-011","revisions":[{"description":"Version initiale","revision_date":"2026-09-28T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"}],"summary":"Le 27 septembre 2026, Citrix a publi\u00e9 un avis de s\u00e9curit\u00e9 concernant plusieurs vuln\u00e9rabilit\u00e9s qui affectent NetScaler ADC et Gateway. \nParmi celles-ci, les vuln\u00e9rabilit\u00e9s CVE-2026-88771 et CVE-2026-88772 permettent une ex\u00e9cution de code arbitraire \u00e0 distance par un attaquant non authentifi\u00e9. \n\nCes vuln\u00e9rabilit\u00e9s sont activement exploit\u00e9es et les exploitations ont commenc\u00e9 avant la disponibilit\u00e9 des correctifs.\n\nDe plus, l'\u00e9diteur indique que si les correctifs n'ont pas \u00e9t\u00e9 install\u00e9s, tous les \u00e9quipements sont vuln\u00e9rables dans leur configuration par d\u00e9faut.\n\nDans son billet de blogue (cf. section Documentation), Citrix indique mettre des indicateurs de compromission \u00e0 disposition de ses clients par le biais de la console Netscaler.","title":"Multiples vuln\u00e9rabilit\u00e9s dans Citrix NetScaler ADC et Gateway","vendor_advisories":[{"published_at":"2026-09-27","title":"Bulletin de s\u00e9curit\u00e9 Citrix CTX697096","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleURL=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"}]}