CVE-2026-88779: citrix netscaler_application_delivery_controller, citrix netscaler_gateway

CVSS 8.7 (high) · listed as exploited by CISA since 2026-10-04 · published 2026-10-04

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

Affected products (NVD): citrix netscaler_application_delivery_controller, citrix netscaler_gateway

Fixed in (NVD): 13.1-37.282, 13.1-64.28, 14.1-73.41

Weakness: CWE-119

Source: NVD CVE-2026-88779

References

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174
• https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.