CVE-2026-88779

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 2/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.

CISA Known Exploited Vulnerability

Vendor / Product Citrix — NetScaler

Date Added 2026-10-04

Remediation Due 2026-10-07

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779

Weakness Classification (1)

CWE-119

Affected Software (7)

Vendor	Product	Version
citrix	netscaler_application_delivery_controller	13.1 – 13.1-37.282
citrix	netscaler_application_delivery_controller	13.1 – 13.1-37.282
citrix	netscaler_application_delivery_controller	13.1 – 13.1-64.28
citrix	netscaler_application_delivery_controller	14.1 – 14.1-73.41
citrix	netscaler_application_delivery_controller	14.1-66.68 – 14.1-73.41
citrix	netscaler_gateway	13.1 – 13.1-64.28
citrix	netscaler_gateway	14.1 – 14.1-73.41