Firetruck

CVE-2026-88772

KEV
Updated Sep 28, 2026 · PUBLISHED
View KEV entry →

Description

Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
ADCCitrix NetScaler / ADC>= 0, < 14.1-73.37affected
ADCCitrix NetScaler / ADC>= 0, < 13.1-64.23affected
ADCCitrix NetScaler / ADC>= 0, < 14.1-73.37 FIPSaffected
ADCCitrix NetScaler / ADC>= 0, < 13.1.37.279 FIPS and NDcPPaffected
GatewayCitrix NetScaler / Gateway>= 0, < 14.1-73.37affected
GatewayCitrix NetScaler / Gateway>= 0, < 13.1-64.23affected