Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestion detail

Dismissed
(not in Nixpkgs)
Permalink CVE-2026-88771
9.5 CRITICAL
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): Present (P)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): High (H)
  • Vulnerable System Impact Integrity (VI): High (H)
  • Vulnerable System Impact Availability (VA): High (H)
  • Subsequent System Impact Confidentiality (SC): High (H)
  • Subsequent System Impact Integrity (SI): High (H)
  • Subsequent System Impact Availability (SA): High (H)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): Present (P)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): High (H)
  • Modified Vulnerable System Impact Integrity (MVI): High (H)
  • Modified Vulnerable System Impact Availability (MVA): High (H)
  • Modified Subsequent System Impact Confidentiality (MSC): High (H)
  • Modified Subsequent System Impact Integrity (MSI): High (H)
  • Modified Subsequent System Impact Availability (MSA): High (H)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
  • Exploit Maturity (E): Not Defined (X)
updated 7 hours ago by @LeSuisse Activity log
  • Created suggestion 14 hours ago
  • @LeSuisse dismissed (not in Nixpkgs) 7 hours ago
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

Affected products

ADC
  • <13.1-64.23
  • <13.1.37.279 FIPS and NDcPP
  • <14.1-73.37
  • <14.1-73.37 FIPS
Gateway
  • <13.1-64.23
  • <14.1-73.37

Matching in nixpkgs

pkgs.adcli

Helper library and tools for Active Directory client operations

  • nixos-unstable -
  • nixos-26.05 -

pkgs.radcli

Simple RADIUS client library

  • nixos-unstable -
    • nixos-unstable-small 1.5.2
  • nixos-26.05 -
    • nixos-26.05-small 1.5.1

pkgs.shadcn

Beautifully designed components that you can copy and paste into your apps

  • nixos-unstable -
  • nixos-26.05 -
    • nixos-26.05-small 3.7.0

pkgs.tradcpp

Traditional (K&R-style) C macro preprocessor

  • nixos-unstable -
    • nixos-unstable-small 0.5.3
  • nixos-26.05 -
    • nixos-26.05-small 0.5.3

pkgs.badchars

HEX badchar generator for different programming languages

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.threadcat

Converts a Mastodon thread to Markdown, and downloads all contained media files

  • nixos-unstable -
    • nixos-unstable-small 0.1.2
  • nixos-26.05 -
    • nixos-26.05-small 0.1.2

pkgs.xmonadctl

Send commands to a running instance of xmonad

  • nixos-unstable -
  • nixos-26.05 -

pkgs.adcskiller

Python-based tool designed to automate the process of discovering and exploiting Active Directory Certificate Services (ADCS) vulnerabilities

pkgs.mcp-gateway

Universal MCP Gateway - Single-port multiplexing with Meta-MCP for ~95% context token savings

  • nixos-unstable -
    • nixos-unstable-small 3.5.1
  • nixos-26.05 -

pkgs.grpc-gateway

GRPC to JSON proxy generator plugin for Google Protocol Buffers

  • nixos-unstable -
  • nixos-26.05 -

pkgs.janus-gateway

General purpose WebRTC server

  • nixos-unstable -
    • nixos-unstable-small 1.4.1
  • nixos-26.05 -
    • nixos-26.05-small 1.4.1

pkgs.ingress2gateway

Convert Ingress resources to Gateway API resources

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.firezone-gateway

WireGuard tunnel server for the Firezone zero-trust access platform

  • nixos-unstable -
    • nixos-unstable-small 1.6.1
  • nixos-26.05 -

pkgs.jetbrains.gateway

Remote development for JetBrains products

  • nixos-unstable -
  • nixos-26.05 -

pkgs.prometheus-pushgateway

Allows ephemeral and batch jobs to expose metrics to Prometheus

  • nixos-unstable -
  • nixos-26.05 -

pkgs.chirpstack-gateway-mesh

Turn LoRa gateways into relays for extending the range of LoRa networks

  • nixos-unstable -
    • nixos-unstable-small 4.1.4
  • nixos-26.05 -
    • nixos-26.05-small 4.1.3

pkgs.chirpstack-gateway-bridge

Gateway Bridge abstracts Packet Forwarder protocols into Protobuf or JSON over MQTT

  • nixos-unstable -
    • nixos-unstable-small 4.1.2
  • nixos-26.05 -
    • nixos-26.05-small 4.1.1

pkgs.home-assistant-custom-components.xiaomi_gateway3

Home Assistant custom component for control Xiaomi Multimode Gateway (aka Gateway 3), Xiaomi Multimode Gateway 2, Aqara Hub E1 on default firmwares over LAN

  • nixos-unstable -
    • nixos-unstable-small 4.2.4
  • nixos-26.05 -
    • nixos-26.05-small 4.1.4

Package maintainers