Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-88778 (GCVE-0-2026-88778)

Vulnerability from nvd – Published: 2026-09-27 16:43 – Updated: 2026-09-27 16:43

Title

TCP Initial Sequence Number (ISN) prediction

Summary

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23.

Severity

8.8 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L

CWE

CWE-342 - Predictable exact value from previous values

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (Patch) Affected: 0 , < 13.1-64.23 (Patch) Affected: 0 , < 14.1-73.37 FIPS (Patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (Patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (Patch) Affected: 0 , < 13.1-64.23 (Patch)

Date Public

2026-09-27 15:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            }
          ]
        }
      ],
      "datePublic": "2026-09-27T15:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23.\u003c/p\u003e"
            }
          ],
          "value": "Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-342",
              "description": "CWE-342 Predictable exact value from previous values",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:43:16.503Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "TCP Initial Sequence Number (ISN) prediction",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88778",
    "datePublished": "2026-09-27T16:43:16.503Z",
    "dateReserved": "2026-09-10T07:14:57.370Z",
    "dateUpdated": "2026-09-27T16:43:16.503Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88777 (GCVE-0-2026-88777)

Vulnerability from nvd – Published: 2026-09-27 16:37 – Updated: 2026-09-27 16:37

Title

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Summary

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service

Severity

8.8 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u0026nbsp;\u003cspan\u003e\u0026nbsp;leading to unpredictable or erroneous behavior or Denial of Service\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u00a0\u00a0leading to unpredictable or erroneous behavior or Denial of Service"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:37:44.345Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096\u0026articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88777",
    "datePublished": "2026-09-27T16:37:44.345Z",
    "dateReserved": "2026-09-10T07:14:57.370Z",
    "dateUpdated": "2026-09-27T16:37:44.345Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88776 (GCVE-0-2026-88776)

Vulnerability from nvd – Published: 2026-09-27 16:36 – Updated: 2026-09-27 16:36

Title

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Summary

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service

Severity

8.8 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Date Public

2026-09-27 15:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-09-27T15:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cbr\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u0026nbsp;\u0026nbsp;leading to unpredictable or erroneous behavior or Denial of Service"
            }
          ],
          "value": "Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u00a0\u00a0leading to unpredictable or erroneous behavior or Denial of Service"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:36:40.034Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88776",
    "datePublished": "2026-09-27T16:36:40.034Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-27T16:36:40.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88775 (GCVE-0-2026-88775)

Vulnerability from nvd – Published: 2026-09-27 16:21 – Updated: 2026-09-27 16:38

Title

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Summary

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Severity

8.8 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading\u0026nbsp;\u003cspan\u003eMemory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading\u00a0Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:38:24.106Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096\u0026articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88775",
    "datePublished": "2026-09-27T16:21:12.160Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-27T16:38:24.106Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88774 (GCVE-0-2026-88774)

Vulnerability from nvd – Published: 2026-09-27 16:14 – Updated: 2026-09-27 16:14

Title

Feature policy bypass due to improper HTTP URL based expression usage

Summary

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression usage.

Severity

7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a f\u003cspan\u003eeature policy bypass due to improper HTTP URL based expression usage.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression usage."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:14:02.993Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096\u0026articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Feature policy bypass due to improper HTTP URL based expression usage",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88774",
    "datePublished": "2026-09-27T16:14:02.993Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-27T16:14:02.993Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88773 (GCVE-0-2026-88773)

Vulnerability from nvd – Published: 2026-09-27 16:20 – Updated: 2026-09-27 16:20

Title

HTTP Request Smuggling

Summary

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.

Severity

9.3 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N

CWE

CWE-444 - Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling')

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (Patch) Affected: 0 , < 13.1-64.23 (Patch) Affected: 0 , < 14.1-73.37 FIPS (Patch) Affected: 0 , < 13.1-37.279 and NDcPP (Patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 FIPS (Patch) Affected: 0 , < 13.1-64.23 (Patch)

Date Public

2026-09-27 15:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1-37.279 and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            }
          ]
        }
      ],
      "datePublic": "2026-09-27T15:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Inconsistent interpretation of HTTP requests (\u0027HTTP Request/Response smuggling\u0027) vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.\u003c/p\u003e"
            }
          ],
          "value": "Inconsistent interpretation of HTTP requests (\u0027HTTP Request/Response smuggling\u0027) vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-444",
              "description": "CWE-444 Inconsistent interpretation of HTTP requests (\u0027HTTP Request/Response smuggling\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:20:08.382Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "HTTP Request Smuggling",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88773",
    "datePublished": "2026-09-27T16:20:08.382Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-27T16:20:08.382Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88772 (GCVE-0-2026-88772)

Vulnerability from nvd – Published: 2026-09-27 16:09 – Updated: 2026-09-28 03:55

CISA

Title

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

Summary

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

Severity

9.5 (Critical)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-27 00:00 UTC

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

NetScaler mitre root

References

2 references

URL	Tags
https://support.citrix.com/support-home/kbsearch/…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-88772",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-27T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-09-27",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-28T03:55:42.777Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-09-27T00:00:00.000Z",
            "value": "CVE-2026-88772 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u0026nbsp;\u003cspan\u003eleading to Remote Code Execution or Denial of Service\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u00a0leading to Remote Code Execution or Denial of Service"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.5,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:09:56.033Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096\u0026articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Memory overflow vulnerability leading to Remote Code Execution or Denial of Service",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88772",
    "datePublished": "2026-09-27T16:09:56.033Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-28T03:55:42.777Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88771 (GCVE-0-2026-88771)

Vulnerability from nvd – Published: 2026-09-27 16:02 – Updated: 2026-09-28 03:55

CISA

Title

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

Summary

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

Severity

9.5 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-27 00:00 UTC

CWE

CWE-20 - Improper input validation

Assigner

NetScaler mitre root

References

2 references

URL	Tags
https://support.citrix.com/support-home/kbsearch/…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Date Public

2026-09-27 15:51

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-88771",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-27T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-09-27",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88771"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-28T03:55:43.854Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88771"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-09-27T00:00:00.000Z",
            "value": "CVE-2026-88771 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-09-27T15:51:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to\u0026nbsp;\u003cspan\u003ean unauthenticated attacker to execute arbitrary commands.\u0026nbsp;\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to\u00a0an unauthenticated attacker to execute arbitrary commands."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.5,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper input validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:02:07.001Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88771",
    "datePublished": "2026-09-27T16:02:07.001Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-28T03:55:43.854Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88778 (GCVE-0-2026-88778)

Vulnerability from cvelistv5 – Published: 2026-09-27 16:43 – Updated: 2026-09-27 16:43

Title

TCP Initial Sequence Number (ISN) prediction

Summary

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23.

Severity

8.8 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L

CWE

CWE-342 - Predictable exact value from previous values

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (Patch) Affected: 0 , < 13.1-64.23 (Patch) Affected: 0 , < 14.1-73.37 FIPS (Patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (Patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (Patch) Affected: 0 , < 13.1-64.23 (Patch)

Date Public

2026-09-27 15:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            }
          ]
        }
      ],
      "datePublic": "2026-09-27T15:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23.\u003c/p\u003e"
            }
          ],
          "value": "Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-342",
              "description": "CWE-342 Predictable exact value from previous values",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:43:16.503Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "TCP Initial Sequence Number (ISN) prediction",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88778",
    "datePublished": "2026-09-27T16:43:16.503Z",
    "dateReserved": "2026-09-10T07:14:57.370Z",
    "dateUpdated": "2026-09-27T16:43:16.503Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88777 (GCVE-0-2026-88777)

Vulnerability from cvelistv5 – Published: 2026-09-27 16:37 – Updated: 2026-09-27 16:37

Title

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Summary

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service

Severity

8.8 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u0026nbsp;\u003cspan\u003e\u0026nbsp;leading to unpredictable or erroneous behavior or Denial of Service\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u00a0\u00a0leading to unpredictable or erroneous behavior or Denial of Service"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:37:44.345Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096\u0026articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88777",
    "datePublished": "2026-09-27T16:37:44.345Z",
    "dateReserved": "2026-09-10T07:14:57.370Z",
    "dateUpdated": "2026-09-27T16:37:44.345Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88776 (GCVE-0-2026-88776)

Vulnerability from cvelistv5 – Published: 2026-09-27 16:36 – Updated: 2026-09-27 16:36

Title

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Summary

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service

Severity

8.8 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Date Public

2026-09-27 15:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-09-27T15:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cbr\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u0026nbsp;\u0026nbsp;leading to unpredictable or erroneous behavior or Denial of Service"
            }
          ],
          "value": "Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u00a0\u00a0leading to unpredictable or erroneous behavior or Denial of Service"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:36:40.034Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88776",
    "datePublished": "2026-09-27T16:36:40.034Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-27T16:36:40.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88775 (GCVE-0-2026-88775)

Vulnerability from cvelistv5 – Published: 2026-09-27 16:21 – Updated: 2026-09-27 16:38

Title

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Summary

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Severity

8.8 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading\u0026nbsp;\u003cspan\u003eMemory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading\u00a0Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:38:24.106Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096\u0026articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88775",
    "datePublished": "2026-09-27T16:21:12.160Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-27T16:38:24.106Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88773 (GCVE-0-2026-88773)

Vulnerability from cvelistv5 – Published: 2026-09-27 16:20 – Updated: 2026-09-27 16:20

Title

HTTP Request Smuggling

Summary

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.

Severity

9.3 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N

CWE

CWE-444 - Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling')

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (Patch) Affected: 0 , < 13.1-64.23 (Patch) Affected: 0 , < 14.1-73.37 FIPS (Patch) Affected: 0 , < 13.1-37.279 and NDcPP (Patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 FIPS (Patch) Affected: 0 , < 13.1-64.23 (Patch)

Date Public

2026-09-27 15:30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1-37.279 and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            }
          ]
        }
      ],
      "datePublic": "2026-09-27T15:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Inconsistent interpretation of HTTP requests (\u0027HTTP Request/Response smuggling\u0027) vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.\u003c/p\u003e"
            }
          ],
          "value": "Inconsistent interpretation of HTTP requests (\u0027HTTP Request/Response smuggling\u0027) vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-444",
              "description": "CWE-444 Inconsistent interpretation of HTTP requests (\u0027HTTP Request/Response smuggling\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:20:08.382Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "HTTP Request Smuggling",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88773",
    "datePublished": "2026-09-27T16:20:08.382Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-27T16:20:08.382Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88774 (GCVE-0-2026-88774)

Vulnerability from cvelistv5 – Published: 2026-09-27 16:14 – Updated: 2026-09-27 16:14

Title

Feature policy bypass due to improper HTTP URL based expression usage

Summary

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression usage.

Severity

7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N

Assigner

NetScaler mitre root

References

1 reference

URL	Tags
https://support.citrix.com/support-home/kbsearch/…

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a f\u003cspan\u003eeature policy bypass due to improper HTTP URL based expression usage.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression usage."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:14:02.993Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096\u0026articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Feature policy bypass due to improper HTTP URL based expression usage",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88774",
    "datePublished": "2026-09-27T16:14:02.993Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-27T16:14:02.993Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88772 (GCVE-0-2026-88772)

Vulnerability from cvelistv5 – Published: 2026-09-27 16:09 – Updated: 2026-09-28 03:55

CISA

Title

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

Summary

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

Severity

9.5 (Critical)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-27 00:00 UTC

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

NetScaler mitre root

References

2 references

URL	Tags
https://support.citrix.com/support-home/kbsearch/…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-88772",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-27T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-09-27",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-28T03:55:42.777Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-09-27T00:00:00.000Z",
            "value": "CVE-2026-88772 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u0026nbsp;\u003cspan\u003eleading to Remote Code Execution or Denial of Service\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23\u00a0leading to Remote Code Execution or Denial of Service"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.5,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:09:56.033Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096\u0026articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Memory overflow vulnerability leading to Remote Code Execution or Denial of Service",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88772",
    "datePublished": "2026-09-27T16:09:56.033Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-28T03:55:42.777Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88771 (GCVE-0-2026-88771)

Vulnerability from cvelistv5 – Published: 2026-09-27 16:02 – Updated: 2026-09-28 03:55

CISA

Title

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

Summary

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

Severity

9.5 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-27 00:00 UTC

CWE

CWE-20 - Improper input validation

Assigner

NetScaler mitre root

References

2 references

URL	Tags
https://support.citrix.com/support-home/kbsearch/…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

2 products

Vendor	Product	Version
Citrix NetScaler	ADC	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch) Affected: 0 , < 14.1-73.37 FIPS (patch) Affected: 0 , < 13.1.37.279 FIPS and NDcPP (patch)
Citrix NetScaler	Gateway	Affected: 0 , < 14.1-73.37 (patch) Affected: 0 , < 13.1-64.23 (patch)

Date Public

2026-09-27 15:51

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-88771",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-27T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-09-27",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88771"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-28T03:55:43.854Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88771"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-09-27T00:00:00.000Z",
            "value": "CVE-2026-88771 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ADC",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "14.1-73.37 FIPS",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1.37.279 FIPS and NDcPP",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Gateway",
          "vendor": "Citrix NetScaler",
          "versions": [
            {
              "lessThan": "14.1-73.37",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "13.1-64.23",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-09-27T15:51:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\u003cp\u003eThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to\u0026nbsp;\u003cspan\u003ean unauthenticated attacker to execute arbitrary commands.\u0026nbsp;\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to\u00a0an unauthenticated attacker to execute arbitrary commands."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.5,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper input validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-27T16:02:07.001Z",
        "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "shortName": "NetScaler"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "assignerShortName": "NetScaler",
    "cveId": "CVE-2026-88771",
    "datePublished": "2026-09-27T16:02:07.001Z",
    "dateReserved": "2026-09-10T07:14:57.369Z",
    "dateUpdated": "2026-09-28T03:55:43.854Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

16 vulnerabilities found for Gateway by Citrix NetScaler

CVE-2026-88778 (GCVE-0-2026-88778)

CVE-2026-88777 (GCVE-0-2026-88777)

CVE-2026-88776 (GCVE-0-2026-88776)

CVE-2026-88775 (GCVE-0-2026-88775)

CVE-2026-88774 (GCVE-0-2026-88774)

CVE-2026-88773 (GCVE-0-2026-88773)

CVE-2026-88772 (GCVE-0-2026-88772)

CVE-2026-88771 (GCVE-0-2026-88771)

CVE-2026-88778 (GCVE-0-2026-88778)

CVE-2026-88777 (GCVE-0-2026-88777)

CVE-2026-88776 (GCVE-0-2026-88776)

CVE-2026-88775 (GCVE-0-2026-88775)

CVE-2026-88773 (GCVE-0-2026-88773)

CVE-2026-88774 (GCVE-0-2026-88774)

CVE-2026-88772 (GCVE-0-2026-88772)

CVE-2026-88771 (GCVE-0-2026-88771)