Oversized HTTP Parameter Fuzzing Against NetScaler ADC/Gateway (CVE-2026-88771)

Ibrahim Saud@tektrix

•updated Sep 28, 2026•4•0•10

Detects anomalous web request patterns against Citrix NetScaler ADC or Gateway devices, characterized by excessively long URLs or request contexts combined with high-frequency parameter variation from a single source. This behavior is indicative of potential fuzzing or exploit attempts targeting web application vulnerabilities, specifically input validation flaws in edge infrastructure.