CVE-2026-88779: Citrix NetScaler

Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.

Vendor: Citrix
Product: NetScaler
Vulnerability: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Date added: Oct 4, 2026
CISA due date (U.S. federal agencies): Oct 7, 2026
Known ransomware campaign use: Unknown
Weakness (CWE): CWE-119

References

NVD — CVE-2026-88779
support.citrix.com
community.citrix.com
www.cisa.gov
www.cisa.gov
nvd.nist.gov

This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.

Last updated: Oct 5, 2026 20:14 UTC · Catalog version 2026.10.04