CVE-2026-88772

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-88772
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778 Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772 US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*
History

28 Sep 2026, 12:26

Type Values Removed Values Added
CPE cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*
First Time Citrix netscaler Application Delivery Controller
Citrix netscaler Gateway
Citrix
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.1
References () https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778 - () https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778 - Vendor Advisory
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772 - US Government Resource

28 Sep 2026, 09:10

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad en Citrix NetScaler ADC y Citrix NetScaler Gateway. Este problema afecta a ADC: versiones anteriores a 14.1-73.37, a 13.1-64.23, a 14.1-73.37 FIPS, y a 13.1.37.279 FIPS y NDcPP; Gateway: versiones anteriores a 14.1-73.37 y a 13.1-64.23, lo que conduce a Ejecución remota de código o Denegación de servicio.

27 Sep 2026, 20:16

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772 -
CWE CWE-119

27 Sep 2026, 17:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-09-27 17:16

Updated : 2026-09-28 12:26

NVD link : CVE-2026-88772

Mitre link : CVE-2026-88772

CVE.ORG link : CVE-2026-88772

JSON object : View

Products Affected

citrix

  • netscaler_gateway
  • netscaler_application_delivery_controller
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer