Vulnerability details
CVE-2026-88779
Actively exploited
NetScaler ADCNetScaler Gateway
Memory overflow vulnerability leading to Denial of Service
CVSS 4.0
8.7High
Official description
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.7High | 4.0 | CVEProject cvelistV5 (CNA) (NetScaler) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| NetScaler | ADC | v < 14.1-73.41 | CVEProject cvelistV5 (CNA) |
| NetScaler | ADC | v < 13.1-64.28 | CVEProject cvelistV5 (CNA) |
| NetScaler | ADC | v < 14.1-73.41 FIPS | CVEProject cvelistV5 (CNA) |
| NetScaler | ADC | v < 13.1-37.282 | CVEProject cvelistV5 (CNA) |
| NetScaler | Gateway | v < 14.1-73.41 | CVEProject cvelistV5 (CNA) |
| NetScaler | Gateway | v < 13.1-64.28 | CVEProject cvelistV5 (CNA) |
References and advisories
3- https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174
- https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779 government-resource
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-10-04
- Last updated
- 2026-10-05
- State
- Published
- Assigner (CNA)
- NetScaler
- Kolun priority
- 77 · High
CISA KEV catalog
- Date added
- 2026-10-04
- Due date
- 2026-10-07
- Used in ransomware
- Unknown
Exploit prediction (EPSS)
11.38%
Probability of exploitation in 30 days
96%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- Active
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer