{"id":"CVE-2026-88772","title":"Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-…","summary":"Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-119"],"vendor":"citrix","product":"netscaler_application_delivery_controller","affected":["netscaler_application_delivery_controller >= 13.1, < 13.1-64.23","netscaler_application_delivery_controller >= 13.1, < 13.1.37.279","netscaler_application_delivery_controller >= 14.1, < 14.1-73.37","netscaler_application_delivery_controller >= 14.1-66.68, <= 14.1-73.37","netscaler_gateway >= 13.1, < 13.1-64.23","netscaler_gateway >= 14.1, < 14.1-73.37"],"patched":["netscaler_application_delivery_controller 14.1-73.37","netscaler_gateway 14.1-73.37"],"published":"2026-09-27","updated":"2026-09-28","sourceUpdated":"2026-09-28T12:26:47.670","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-88772","references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778","label":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","exploit-available","cve.org"],"kev":true,"kevDateAdded":"2026-09-27","kevDueDate":"2026-09-30","kevRansomware":false,"exploited":true,"exploits":{"github":4,"githubRepos":["https://github.com/murrez/CVE-2026-88772","https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772","https://github.com/FollowerSeize/CVE-2026-88772-POC"],"metasploit":["exploit/freebsd/http/citrix_netscaler_cve_2026_88771"],"checkedAt":"2026-10-27T19:20:12.449Z"},"exploitAvailable":true,"zeroDay":true,"ssvc":{"exploitation":"active","automatable":"no","technicalImpact":"total","timestamp":"2026-09-27T22:01:33.011283Z"},"scores":{"nvd":8.1,"cna":9.5},"ingestedAt":"2026-09-27T16:55:23.216Z","epss":0.78162,"epssPercentile":0.99576,"slug":"CVE-2026-88772","body":"## Overview\n\nVulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service\n\n## Affected\n\n- `netscaler_application_delivery_controller >= 13.1, < 13.1-64.23`\n- `netscaler_application_delivery_controller >= 13.1, < 13.1.37.279`\n- `netscaler_application_delivery_controller >= 14.1, < 14.1-73.37`\n- `netscaler_application_delivery_controller >= 14.1-66.68, <= 14.1-73.37`\n- `netscaler_gateway >= 13.1, < 13.1-64.23`\n- `netscaler_gateway >= 14.1, < 14.1-73.37`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `netscaler_application_delivery_controller 14.1-73.37`\n- `netscaler_gateway 14.1-73.37`","depth":"abyssal","depthScore":85,"depthScoreParts":{"impact":44.6,"likelihood":15.6,"exploitation":25,"ransomware":0},"changes":[{"seq":230244,"id":"CVE-2026-88772","ts":1793128820660,"field":"epss","old":"0.05305","new":"0.78162"},{"seq":211885,"id":"CVE-2026-88772","ts":1790601035727,"field":"cvss","old":"9.5","new":"8.1"},{"seq":211884,"id":"CVE-2026-88772","ts":1790601035727,"field":"severity","old":"critical","new":"high"},{"seq":211715,"id":"CVE-2026-88772","ts":1790553631656,"field":"zero_day","old":"false","new":"true"},{"seq":211714,"id":"CVE-2026-88772","ts":1790553631656,"field":"kev","old":"false","new":"true"},{"seq":211683,"id":"CVE-2026-88772","ts":1790542715225,"field":"exploit_available","old":"false","new":"true"},{"seq":211682,"id":"CVE-2026-88772","ts":1790542715225,"field":"exploited","old":"false","new":"true"}]}