Skip to content
Back to search

CVE-2026-88777

CRITICAL
9.8NVD

Summary

generated automatically from NVD data

CVE-2026-88777 is a memory overflow flaw (CWE-119) in Citrix NetScaler ADC and NetScaler Gateway. It can cause unpredictable or erroneous behavior or a Denial of Service. Affected are ADC releases before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP, plus Gateway releases before 14.1-73.37 and before 13.1-64.23. The CVSS v3.1 score is 9.8 (CRITICAL), with a network attack vector and no privileges or user interaction required.

NVD description

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23  leading to unpredictable or erroneous behavior or Denial of Service

Share:

EPSS · FIRST.org

0.38%probability of exploitation in the next 30 days

Higher than 30% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-16, recomputed daily by FIRST.org.

In-depth analysis on cveo.tech

We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.

CVSS v3.1 Score

9.8
/ 10.0
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Information

Published
27 sept. 2026
Updated
29 sept. 2026
Status
Modified
Source
50a63c94-1ea7-4568-8c11-eb79e7c5a2b5

Affected products

citrix netscaler application delivery controller
Versions : 13.1-64.23, 13.1.37.279, 14.1-73.37
citrix netscaler gateway
Versions : 13.1-64.23, 14.1-73.37

Weaknesses (CWE)

CWE-119CWE-119

References (1)

Similar CVEs

Other vulnerabilities of type CWE-119

…

Monitor your products

Get automatic alerts for every new CVE affecting your equipment.

Enable monitoring