CVE-2026-88779

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

CVSS 4.0

8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-25)

CISA KEV

listed 2026-10-04, due 2026-10-07

CWE

CWE-119

Published

2026-10-04

Modified

2026-10-05

Record from

the NVD, synced 2026-10-19

Affected

• citrix:netscaler_application_delivery_controller
• citrix:netscaler_gateway

References

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174
• https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779

Check your stackJSON