{"id":"CVE-2026-88779","published":"2026-10-04T04:16:43.680","lastModified":"2026-10-05T13:35:24.663","description":"Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-119"],"vendors":["citrix"],"products":["netscaler application delivery controller","netscaler gateway"],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174","tags":["Vendor Advisory"]},{"url":"https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779","tags":["US Government Resource"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability is a memory safety issue (CWE-119) in Citrix NetScaler ADC and Gateway appliances that can lead to remote code execution or denial of service when processing specific network requests. The flaw allows attackers to potentially corrupt memory and execute arbitrary code on affected systems.","exploitability":"Exploitation appears moderately difficult as it likely requires crafting specific network packets targeting the vulnerable NetScaler components, but no public exploit is available yet and the attack surface is limited to the appliance's network-facing services.","blast_radius":"If exploited, this vulnerability could impact all network traffic handled by the affected NetScaler appliances, potentially causing widespread service disruption or allowing attackers to gain full control over the appliance and its network access capabilities.","remediation":"Upgrade to NetScaler ADC 14.1-73.41 or later for both ADC and Gateway appliances, or to 13.1-64.28 for older versions.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","dos","network"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:58:14.100Z"}}