EXPOSURES › CVE-2026-88777
CVE-2026-88777
CRITICALA memory overflow vulnerability in Citrix NetScaler ADC and Gateway allows denial of service or unpredictable behavior before version 14.1-73.37.
This memory overflow flaw in Citrix NetScaler ADC and Gateway can cause denial of service or erratic behavior, impacting DIB organizations relying on Citrix for secure remote access. DIBs must patch to versions 14.1-73.37 or later immediately to prevent service disruption and maintain compliance with NIST 800-171 controls requiring timely patching.
Shame score — A critical memory overflow vulnerability with a CVSS score of 9.8 that affects widely deployed Citrix products, though it does not enable remote code execution or data exfiltration.
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service
| PRODUCT | STATUS |
|---|---|
| Citrix for Government Citrix |
Authorized |