---
id: CVE-2026-88772
title: >-
  Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.


  This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before
  14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before
  14.1-73.37 and before 13.1-…
summary: >-
  Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.


  This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before
  14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before
  14.1-73.37 and before 13.1-…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-119
vendor: citrix
product: netscaler_application_delivery_controller
affected:
  - 'netscaler_application_delivery_controller >= 13.1, < 13.1-64.23'
  - 'netscaler_application_delivery_controller >= 13.1, < 13.1.37.279'
  - 'netscaler_application_delivery_controller >= 14.1, < 14.1-73.37'
  - 'netscaler_application_delivery_controller >= 14.1-66.68, <= 14.1-73.37'
  - 'netscaler_gateway >= 13.1, < 13.1-64.23'
  - 'netscaler_gateway >= 14.1, < 14.1-73.37'
patched:
  - netscaler_application_delivery_controller 14.1-73.37
  - netscaler_gateway 14.1-73.37
published: '2026-09-27'
updated: '2026-09-28'
sourceUpdated: '2026-09-28T12:26:47.670'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-88772'
references:
  - url: >-
      https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778
    label: 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5
  - url: >-
      https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - kev
  - in-the-wild
  - exploit-available
  - cve.org
kev: true
kevDateAdded: '2026-09-27'
kevDueDate: '2026-09-30'
kevRansomware: false
exploited: true
exploits:
  github: 4
  githubRepos:
    - 'https://github.com/murrez/CVE-2026-88772'
    - >-
      https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772
    - 'https://github.com/FollowerSeize/CVE-2026-88772-POC'
  metasploit:
    - exploit/freebsd/http/citrix_netscaler_cve_2026_88771
  checkedAt: '2026-11-05T15:59:36.261Z'
exploitAvailable: true
zeroDay: true
ssvc:
  exploitation: active
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-27T22:01:33.011283Z'
scores:
  nvd: 8.1
  cna: 9.5
ingestedAt: '2026-09-27T16:55:23.216Z'
epss: 0.78162
epssPercentile: 0.99578
---

## Overview

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

## Affected

- `netscaler_application_delivery_controller >= 13.1, < 13.1-64.23`
- `netscaler_application_delivery_controller >= 13.1, < 13.1.37.279`
- `netscaler_application_delivery_controller >= 14.1, < 14.1-73.37`
- `netscaler_application_delivery_controller >= 14.1-66.68, <= 14.1-73.37`
- `netscaler_gateway >= 13.1, < 13.1-64.23`
- `netscaler_gateway >= 14.1, < 14.1-73.37`

## Remediation

Upgrade past the affected range:

- `netscaler_application_delivery_controller 14.1-73.37`
- `netscaler_gateway 14.1-73.37`