{"id":"CVE-2026-88779","title":"Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.","summary":"Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-119"],"vendor":"citrix","product":"netscaler_application_delivery_controller","affected":["netscaler_application_delivery_controller >= 13.1, < 13.1-37.282","netscaler_application_delivery_controller >= 13.1, < 13.1-64.28","netscaler_application_delivery_controller >= 14.1, < 14.1-73.41","netscaler_application_delivery_controller >= 14.1-66.68, <= 14.1-73.41","netscaler_gateway >= 13.1, < 13.1-64.28","netscaler_gateway >= 14.1, < 14.1-73.41"],"patched":["netscaler_application_delivery_controller 14.1-73.41","netscaler_gateway 14.1-73.41"],"published":"2026-10-04","updated":"2026-10-05","sourceUpdated":"2026-10-05T13:35:24.663","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-88779","references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174","label":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"},{"url":"https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","cve.org","exploit-available"],"epss":0.11388,"epssPercentile":0.95971,"kev":true,"kevDateAdded":"2026-10-04","kevDueDate":"2026-10-07","kevRansomware":false,"exploited":true,"zeroDay":true,"exploitAvailable":true,"ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-04T19:34:09.964186Z"},"scores":{"nvd":7.5,"cna":8.7},"ingestedAt":"2026-10-04T03:52:59.537Z","slug":"CVE-2026-88779","body":"## Overview\n\nVulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.\n\n## Affected\n\n- `netscaler_application_delivery_controller >= 13.1, < 13.1-37.282`\n- `netscaler_application_delivery_controller >= 13.1, < 13.1-64.28`\n- `netscaler_application_delivery_controller >= 14.1, < 14.1-73.41`\n- `netscaler_application_delivery_controller >= 14.1-66.68, <= 14.1-73.41`\n- `netscaler_gateway >= 13.1, < 13.1-64.28`\n- `netscaler_gateway >= 14.1, < 14.1-73.41`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `netscaler_application_delivery_controller 14.1-73.41`\n- `netscaler_gateway 14.1-73.41`","depth":"abyssal","depthScore":69,"depthScoreParts":{"impact":41.3,"likelihood":2.3,"exploitation":25,"ransomware":0},"changes":[{"seq":230245,"id":"CVE-2026-88779","ts":1793128820957,"field":"epss","old":"0.00592","new":"0.11388"},{"seq":215831,"id":"CVE-2026-88779","ts":1791210175407,"field":"cvss","old":"8.7","new":"7.5"},{"seq":215663,"id":"CVE-2026-88779","ts":1791177221169,"field":"zero_day","old":"false","new":"true"},{"seq":215662,"id":"CVE-2026-88779","ts":1791177221169,"field":"kev","old":"false","new":"true"},{"seq":215606,"id":"CVE-2026-88779","ts":1791147852927,"field":"exploit_available","old":"false","new":"true"},{"seq":215605,"id":"CVE-2026-88779","ts":1791147852927,"field":"exploited","old":"false","new":"true"}]}