CVE-2026-88772 - Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service
- Severity
- critical
- Product
- Citrix NetScaler
- Published
- 2026-09-27
- EPSS
- 0.782
- CISA KEV
- Known exploited
- Ransomware
- Known campaign use
References and validation
- https://github.com/search?q=CVE-2026-88772&type=repositories
- https://nvd.nist.gov/vuln/detail/CVE-2026-88772
Entries are refreshed from CISA KEV and FIRST EPSS. Validate applicability before testing.