EXPOSURES › CVE-2026-88775
CVE-2026-88775
CRITICALA critical memory overflow flaw in Citrix NetScaler ADC and Gateway allows remote denial of service or unpredictable behavior before version 14.1-73.37.
This memory overflow vulnerability in Citrix NetScaler ADC and Gateway enables attackers to cause denial of service or unpredictable behavior remotely. DIB organizations must patch these products immediately to prevent service disruption and maintain compliance with NIST 800-171 requirements for managing known vulnerabilities.
Shame score — A critical CVSS 9.8 memory overflow flaw affecting widely deployed Citrix infrastructure remains unpatched in older versions, representing a high-risk, avoidable exposure for defense contractors relying on these systems.
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
| PRODUCT | STATUS |
|---|---|
| Citrix for Government Citrix |
Authorized |