---
id: CVE-2026-88779
title: >-
  Vulnerability in NetScaler ADC and NetScaler Gateway.


  This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before
  14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before
  13.1-64.28.
summary: >-
  Vulnerability in NetScaler ADC and NetScaler Gateway.


  This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before
  14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before
  13.1-64.28.
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-119
vendor: citrix
product: netscaler_application_delivery_controller
affected:
  - 'netscaler_application_delivery_controller >= 13.1, < 13.1-37.282'
  - 'netscaler_application_delivery_controller >= 13.1, < 13.1-64.28'
  - 'netscaler_application_delivery_controller >= 14.1, < 14.1-73.41'
  - 'netscaler_application_delivery_controller >= 14.1-66.68, <= 14.1-73.41'
  - 'netscaler_gateway >= 13.1, < 13.1-64.28'
  - 'netscaler_gateway >= 14.1, < 14.1-73.41'
patched:
  - netscaler_application_delivery_controller 14.1-73.41
  - netscaler_gateway 14.1-73.41
published: '2026-10-04'
updated: '2026-10-05'
sourceUpdated: '2026-10-05T13:35:24.663'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-88779'
references:
  - url: >-
      https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174
    label: 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5
  - url: >-
      https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - kev
  - in-the-wild
  - cve.org
  - exploit-available
epss: 0.11388
epssPercentile: 0.95971
kev: true
kevDateAdded: '2026-10-04'
kevDueDate: '2026-10-07'
kevRansomware: false
exploited: true
zeroDay: true
exploitAvailable: true
ssvc:
  exploitation: active
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-04T19:34:09.964186Z'
scores:
  nvd: 7.5
  cna: 8.7
ingestedAt: '2026-10-04T03:52:59.537Z'
---

## Overview

Vulnerability in NetScaler ADC and NetScaler Gateway.

This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

## Affected

- `netscaler_application_delivery_controller >= 13.1, < 13.1-37.282`
- `netscaler_application_delivery_controller >= 13.1, < 13.1-64.28`
- `netscaler_application_delivery_controller >= 14.1, < 14.1-73.41`
- `netscaler_application_delivery_controller >= 14.1-66.68, <= 14.1-73.41`
- `netscaler_gateway >= 13.1, < 13.1-64.28`
- `netscaler_gateway >= 14.1, < 14.1-73.41`

## Remediation

Upgrade past the affected range:

- `netscaler_application_delivery_controller 14.1-73.41`
- `netscaler_gateway 14.1-73.41`