[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":44,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":51,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":57,"vulnerability-29785":64},[4,15,21,27,33,39],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Network Scanner","compliance-pages-launch-network-scanner","Scheduled scans are the spine of every compliance framework. Are you audit-ready?","https:\u002F\u002Fpentest-tools.com\u002Fusage\u002Fcompliance",false,[11],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Get compliance evidence","secondary","compliance-pages-launch",{"title":16,"slug":17,"text":18,"link":8,"external":9,"targets":19,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Website Scanner","compliance-pages-launch-website-scanner","Authenticated web-app scans show up in SOC 2, NIS2, and CRA Annex I. See why this is crucial for the business.",[20],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner",{"title":22,"slug":23,"text":24,"link":8,"external":9,"targets":25,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Advanced Pentest Reporting","compliance-pages-launch-reporting","Editable DOCX. Immutable PDF. JSON for the GRC tool. See why these formats are on every auditor's checklist.",[26],"\u002Ffeatures\u002Fpentest-reporting",{"title":28,"slug":29,"text":30,"link":8,"external":9,"targets":31,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Integrations","compliance-pages-launch-integrations","Vanta, Jira, webhooks - they all route back to DORA, NIS2, SOC 2, ISO 27001, CRA. See why this is crucial for the business.",[32],"\u002Ffeatures\u002Fintegrations",{"title":34,"slug":35,"text":36,"link":8,"external":9,"targets":37,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Sniper","compliance-pages-launch-sniper","Five compliance framework pages now reference Sniper as the source of validated exploitability evidence. See them all.",[38],"\u002Fexploit-helpers\u002Fsniper",{"title":40,"slug":14,"text":41,"link":8,"external":9,"targets":42,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Homepage","Turn confirmed vulnerabilities into evidence your auditor accepts. Testing requirements for DORA, NIS2, SOC 2, ISO 27001, and CRA.",[43],"\u002F",["Island",45],{"key":46,"params":47,"result":49},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":48},"{}",{"head":50},{},["Island",52],{"key":53,"params":54,"result":55},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":48},{"head":56},{},["Island",58],{"key":59,"params":60,"result":62},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":61},"{\"text-color\":\"gray\"}",{"head":63},{},{"id":65,"detectable_with":66,"vuln_details":72,"vuln_id":96,"name":97,"published":98,"updated":98},29785,{"tool":67,"engine":70},{"id":68,"name":69},1,"Network Scanner",{"id":68,"name":71},"Sniper",{"id":65,"codename":73,"description":74,"severity":75,"risk_description":76,"public_description":77,"public_recommendation":78,"recommendation":79,"references":80,"cvssv3":84,"epss_score":85,"epss_percentile":86,"cve":87,"in_cisa_catalog":89,"date":90,"software_type":91,"vendor":92,"product":93,"ptt_exploit_capabilities":94},null,"We found that the target server is vulnerable to CVE-2026-88771, a Remote Code Execution vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The root cause is an OS command injection in an appliance monitoring script that parses NetScaler crash logs and interpolates an attacker-controlled value, poisoned through the unauthenticated Gateway authentication endpoint, unquoted into a shell command. This allows an unauthenticated remote attacker to execute arbitrary commands as root, in the default configuration. We detected this vulnerability by fingerprinting the NetScaler build and confirming it is older than the patched version.","critical","The risk exists that an unauthenticated remote attacker could gain Remote Code Execution access as root which will result in a fully compromised appliance through which they could steal confidential information, deploy webshells, install ransomware, or pivot to the internal network.","Citrix NetScaler ADC and NetScaler Gateway are vulnerable to CVE-2026-88771, a Remote Code Execution vulnerability. An OS command injection in an appliance monitoring script, reachable through the unauthenticated authentication endpoint, allows an unauthenticated remote attacker to execute arbitrary commands as root in the default configuration.","Update Citrix NetScaler ADC and NetScaler Gateway to a fixed version (14.1-73.37, 13.1-64.23, or later) as described in Citrix bulletin CTX697096.","We recommend to update Citrix NetScaler ADC and NetScaler Gateway to a fixed version (14.1-73.37, 13.1-64.23, or later) as described in Citrix bulletin CTX697096. End-of-life releases (12.1 and 13.0) do not receive a fix and should be migrated to a supported version.",[81,82,83],"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-88771","https:\u002F\u002Fsupport.citrix.com\u002Farticle\u002FCTX697096","https:\u002F\u002Flabs.watchtowr.com\u002Foh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771\u002F",9.5,0.01063,0.63433,[88],"CVE-2026-88771",true,"2026-09-27T00:00:00Z","Network Management","Citrix","Citrix NetScaler",[95],"RCE","NETSCAN-SNIPER-CVE-2026-88771","Citrix NetScaler - Remote Code Execution","2026-09-30T00:00:00Z"]