CVE-2026-88779

Citrix NetScaler ADC and Gateway suffer a memory buffer vulnerability causing denial of service, part of a pattern of critical flaws exploited in the wild.

Citrix NetScaler ADC and Gateway contain a memory buffer vulnerability that allows denial of service, continuing a history of critical flaws exploited in the wild. DIB orgs must patch immediately as CISA has issued binding orders for similar recent flaws, and the product's poor track record of RCE and memory corruption makes it a high-risk asset. Failure to patch exposes systems to service disruption and potential escalation to code execution if chained with other vulnerabilities.

Shame score — The product has a documented history of critical memory corruption vulnerabilities exploited in the wild, and CISA has issued binding patch orders for recent flaws, indicating negligent patching and avoidable exposure.