NetScaler® Console service

Remediate vulnerabilities for CVE-2026-88778

In the NetScaler Console security advisory dashboard, under Current CVEs <number of> NetScaler instances are impacted by CVEs, you can see all the instances vulnerable due to CVE-2026-88778. To check the details of the instances impacted by the CVEs, select CVE-2026-88778 and click View Affected Instances.

Security advisory dashboard for CVE-2026-sep

Remediate CVE-2026-88778

For CVE-2026-88778-impacted NetScaler instances, the remediation is a two-step process. In the GUI, under Current CVEs > NetScaler instances are impacted by CVEs, you can see step 1 and 2.

Security advisory dashboard for CVE-2026-sep

The two steps include:

  1. Upgrading the vulnerable NetScaler instances to a release and build that has the fix.

  2. Applying the required configuration commands using the customizable built-in configuration template in configuration jobs.

Under Current CVEs> NetScaler instances impacted by CVEs, you see two separate workflows for this 2-step remediation process: which are Proceed to upgrade workflow and Proceed to configuration job workflow.

Step 1: Upgrade the vulnerable NetScaler instances

To upgrade the vulnerable instances, select the instances and click Proceed to upgrade workflow. The upgrade workflow opens with the vulnerable NetScaler instances already populated.

NetScaler instances impacted

For more information on how to use NetScaler Console to upgrade NetScaler instances, see Create a NetScaler upgrade job.

Note:

This step can be done at once for all the vulnerable NetScaler instances.

Step 2: Apply configuration commands

After you’ve upgraded the impacted instances, in the <number of> NetScaler instances impacted by CVEs window, select the instance impacted by CVE-2026-88778 and click Proceed to configuration job workflow. The workflow includes the following steps.

  1. Customizing the configuration.
  2. Reviewing the auto-populated impacted instances.
  3. Specifying inputs for variables for the job.
  4. Reviewing the final config with variable inputs populated.
  5. Running the job.

Keep the following point in mind before you select an instance and click Proceed to configuration job workflow:

  • For multiple NetScaler instances that are impacted by CVE-2026-88778 only: you can run config jobs on all instances at once. For example, you’ve NetScaler 1, NetScaler 2, and NetScaler 3, and all of them are impacted only by CVE-2026-88778. Select all these instances and click Proceed to configuration job workflow, and the built-in configuration template auto-populates under Select configuration.

Step 1: Select configuration

In the configuration job workflow, the built-in configuration base template auto-populates under Select configuration.

Select config

Step 2: Select the instance

The impacted instance is auto-populated under Select Instances. Select the instance. Click Next. In the next step preview the configurations. Click Next.

Note:

For NetScaler instances in cluster mode, using security advisory, NetScaler Console supports running the config job only on the cluster configuration coordinator (CCO) node. Run the commands on non-CCO nodes separately.

Step 3: Run the configuration

Click Finish to run the configuration job.

After the job is run, it appears under Infrastructure > Configuration > Configuration Jobs.

After completing the two remediation steps for all vulnerable NetScaler instances, you can run an on-demand scan to see the revised security posture.

Remediate vulnerabilities for CVE-2026-88778