EXPOSURES › CVE-2026-88776
CVE-2026-88776
CRITICALA memory overflow vulnerability in Citrix NetScaler ADC and Gateway allows denial of service or unpredictable behavior before version 14.1-73.37.
This memory overflow flaw in Citrix NetScaler ADC and Gateway can cause denial of service or erratic behavior, impacting availability for DIB organizations relying on these appliances for secure access. Organizations must patch to versions 14.1-73.37 or later immediately to prevent service disruption and maintain compliance with availability requirements.
Shame score — A critical memory overflow vulnerability affecting widely deployed Citrix infrastructure, though not actively exploited in the wild or linked to ransomware, still represents a significant unpatched risk for DIB systems.
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service
| PRODUCT | STATUS |
|---|---|
| Citrix for Government Citrix |
Authorized |