CVE-2026-88775 Citrix NetScaler CVE debrief

Who should care

Administrators and security teams responsible for Citrix NetScaler ADC and Gateway deployments should assess exposure and apply patches to prevent potential Denial of Service. They should also review inventory and deployment contexts to ensure all affected versions are addressed. Security teams should prioritize patching and verifying affected systems to minimize potential impacts.

Why it matters

CVE-2026-88775 is a memory overflow vulnerability in Citrix NetScaler ADC and Gateway, potentially leading to Denial of Service. Administrators and security teams should assess exposure, verify and apply patches, and review inventory to prevent potential impacts.

• Potential Denial of Service due to memory overflow
• Need to verify and apply patches for affected Citrix NetScaler ADC and Gateway versions
• Requires review of inventory and deployment contexts for Citrix NetScaler ADC and Gateway

Technical summary

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway can lead to unpredictable or erroneous behavior or Denial of Service. The issue affects ADC versions before 14.1-73.37, 13.1-64.23, 14.1-73.37 FIPS, and 13.1.37.279 FIPS and NDcPP; and Gateway versions before 14.1-73.37 and 13.1-64.23. This vulnerability can cause Denial of Service and unpredictable behavior, emphasizing the need for prompt patching and review of inventory. Affected versions require immediate attention to prevent potential impacts.

Defensive priority

Apply vendor patches for Citrix NetScaler ADC and Gateway to prevent potential Denial of Service.

Recommended defensive actions

• Apply patches for Citrix NetScaler ADC versions before 14.1-73.37, 13.1-64.23, 14.1-73.37 FIPS, and 13.1.37.279 FIPS and NDcPP
• Apply patches for Citrix NetScaler Gateway versions before 14.1-73.37 and 13.1-64.23
• Review and update inventory of Citrix NetScaler ADC and Gateway deployments
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide initial details on the memory overflow vulnerability in Citrix NetScaler ADC and Gateway. Evidence is limited to public CVE and NVD sources. Defenders should verify affected versions and apply patches according to vendor guidance. Additional review of deployment contexts and compensating controls may be necessary.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.