Vulnerability in NetScaler ADC and Gateway by Citrix
CVE-2026-88779

8.7HIGH

Key Information:

Vendor: Netscaler
Status: Adc; Gateway
Vendor: CVE Published:; 4 October 2026

Badges

🔥 Trending now📈 Trended📈 Score: 3,400👾 Exploit Exists🦅 CISA Reported📰 News Worthy

What is CVE-2026-88779?

CVE-2026-88779 is a significant vulnerability affecting Citrix's NetScaler Application Delivery Controller (ADC) and NetScaler Gateway products. NetScaler ADC is commonly utilized for managing and optimizing application delivery, ensuring high availability and performance for networked applications. The vulnerability could lead to serious implications for organizations using these products, as it can expose the systems to unauthorized access and potential exploitation. Specifically, affected versions include ADC before 14.1-73.41, 13.1-64.28, and their corresponding FIPS editions, as well as Gateway versions before 14.1-73.41 and 13.1-64.28. Organizations failing to address this vulnerability may find their critical infrastructure at risk, as it can facilitate various attack vectors if exploited.

Potential impact of CVE-2026-88779

Unauthorized Access: The vulnerability may enable attackers to gain unauthorized access to sensitive systems and data, potentially compromising the integrity and confidentiality of critical business operations.
Service Disruption: Exploitation could lead to service outages, disrupting normal operations and affecting the availability of applications that depend on the ADC and Gateway, which can result in significant downtime and loss of productivity.
Data Breaches: If exploited, the vulnerability could facilitate data breaches, allowing sensitive information to be accessed, extracted, or manipulated by malicious actors, potentially leading to regulatory issues and reputational damage for affected organizations.

CISA has reported CVE-2026-88779

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2026-88779 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Affected Version(s)

ADC 0 < 14.1-73.41

ADC 0 < 13.1-64.28

ADC 0 < 14.1-73.41 FIPS

News Articles

Cyberscoop

CVE-2026-88779

Citrix discloses third actively exploited NetScaler zero-day in less than a week

The vendor was much quicker and consistent in its response to the latest defect, and researchers consider the impact relatively low compared to the previous pair of zero-days.

4 days ago