CVE-2026-88772

Citrix NetScaler ADC and Gateway suffer a memory buffer flaw enabling remote code execution or denial of service.

Citrix NetScaler ADC and Gateway contain a memory buffer vulnerability allowing remote code execution or denial of service. DIB organizations must patch immediately as CISA has issued binding orders for similar flaws, and the product has a history of critical RCE vulnerabilities exploited in the wild. Failure to patch exposes critical infrastructure to arbitrary code execution and potential data breaches.

Shame score — A critical memory buffer flaw enabling remote code execution in a widely deployed ADC with a poor security track record of unpatched, exploited vulnerabilities.