Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Citrix NetScaler ADC and Gateway may crash or misbehave

CVE-2026-88777 · published 22 days ago
Summary

Versions of Citrix NetScaler ADC and NetScaler Gateway older than the listed releases can experience a memory overflow that may cause the device to behave unexpectedly or stop working. This could lead to service interruptions for users relying on these appliances. Update the appliances to the latest software versions to prevent the issue.

What to do
  • Update citrix netscaler adc to version 14.1-73.37 or later.
  • Update citrix netscaler gateway to version 14.1-73.37 or later.
Affected software
VendorProductAffected versions
citrix netscaler adc < 14.1-73.37
citrix netscaler gateway < 14.1-73.37
citrix netscaler_application_delivery_controller >= 13.1, < 13.1-64.23
>= 13.1, < 13.1.37.279
>= 14.1, < 14.1-73.37
>= 14.1-66.68, <= 14.1-73.37
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*
citrix netscaler_gateway >= 13.1, < 13.1-64.23
>= 14.1, < 14.1-73.37
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*
Original advisory text
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23  leading to unpredictable or erroneous behavior or Denial of Service
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published27 Sep 2026
Updated19 Oct 2026
First seen27 Sep 2026
Sources
CVE-2026-88777 · NVD
CVE-2026-88777 · MITRE
Track software like this
Free during beta