Remote Code Execution and Denial of Service Vulnerabilities in Citrix NetScaler Products
CVE-2026-88772

9.5CRITICAL

Key Information:

Vendor: Citrix Netscaler
Status: Adc; Gateway
Vendor: CVE Published:; 27 September 2026

🔔 Create Citrix Netscaler Vulnerability Alert

What is CVE-2026-88772?

A significant vulnerability exists in Citrix NetScaler ADC and NetScaler Gateway, affecting multiple versions of these products. This issue could allow attackers to execute remote code or disrupt service availability. Users are strongly advised to apply the latest patches to mitigate potential risks associated with this vulnerability.

Affected Version(s)

ADC 0 < 14.1-73.37

ADC 0 < 13.1-64.23

ADC 0 < 14.1-73.37 FIPS

References

https://support.citrix.com/support-home/kbsearch/article?...

CVSS V4

Score:

9.5

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 27, 2026
Vulnerability Reserved
Sep 10, 2026

CVE-2026-88772 Data

JSON