CVE-2026-88772 Citrix NetScaler ADC
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to…
- CVSS
- 9.5 Critical
- EPSS
- 77%
- Percentile
- 100
- Published
- 2026-09-27
- Force
- 11 of 12
- Public PoC
- 4
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
On CISA’s exploited list
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- Added
- 2026-09-27
- Federal patch deadline
- 2026-09-30
- Ransomware use
- not known