Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

cve CVE-2026-88779 3 sources, 3 claims · Watch

CISA Known Exploited Vulnerabilities writes:
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service. Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 2… the claim

Severity: high GitHub advisories
HIGH NVD
CVSS: 7.5 GitHub advisories
7.5 NVD
Exploited: yes CISA Known Exploited Vulnerabilities
Known ransomware campaign use: Unknown CISA Known Exploited Vulnerabilities
Due date: 2026-10-07 CISA Known Exploited Vulnerabilities
Fixed in: 14.1-73.41, 13.1-64.28, 13.1-37.282 NVD
Vendor: Citrix CISA Known Exploited Vulnerabilities
NetScaler NVD
Product: NetScaler CISA Known Exploited Vulnerabilities
ADC NVD
CWE: CWE-119 GitHub advisories
CWE-119 CISA Known Exploited Vulnerabilities
CWE-119 NVD

How far exploitation has got

No public code known
Proof of concept
Proof of concept, verified
A Metasploit module
Exploited in the wild · CISA Known Exploited Vulnerabilities 2026-10-04
Used in ransomware campaigns

Timeline

2026-10-04	first spoke of it: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	CISA Known Exploited Vulnerabilities
2026-10-04	first spoke of it: Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41,...	GitHub advisories
2026-10-04	first spoke of it: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	NVD
2026-10-07	Due date	CISA Known Exploited Vulnerabilities

What it is to other things

affects	citrix/netscaler_application_delivery_controller NVD
affects	citrix/netscaler_gateway NVD
made_by	citrix NVD

In words only, so not counted until a person confirms one:

affects	`citrix/netscaler` CISA Known Exploited Vulnerabilities says “Citrix · NetScaler”
affects	`netscaler/adc` NVD says “NetScaler · ADC”
made_by	`netscaler` NVD says “NetScaler”

Every value, with what each source said and its receipt

Property Source Said Means here

Automatable

automatable

NVD

yes

An attacker can reliably run all of the kill chain's first four steps without a person.

receipt

Source: NVD
Its words: yes
Read by: field:cve.metrics.ssvcV203[].ssvcData.options[].automatable
Said since: 2026-10-06 12:31 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:31 UTC	yes
2026-10-04 06:13 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CVSS

cvss

GitHub advisories

7.5

receipt

Source: GitHub advisories
Its words: 7.5
Read by: field:cvss.score
Said since: 2026-10-05 18:22 UTC
Last answered: 2026-10-06 13:46 UTC
Original: open at the source

2026-10-05 18:22 UTC	7.5
2026-10-04 12:12 UTC	—

What the source handed over

{
  "comments": 0,
  "credits": [],
  "cve_id": "CVE-2026-88779",
  "cvss": {
    "score": 7.5,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.5,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
    },
    "cvss_v4": {
      "score": 8.7,
      "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-119",
      "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
    }
  ],
  "description": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.",
  "epss": {
    "percentage": 0.00276,
    "percentile": 0.18203
  },
  "ghsa_id": "GHSA-56r3-m27m-8p62",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-56r3-m27m-8p62",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-56r3-m27m-8p62"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-88779"
    }
  ],
  "nvd_published_at": "2026-10-04T04:16:43Z",
  "published_at": "2026-10-04T06:34:12Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
    "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174",
    "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway",
    "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779",
    "https://github.com/advisories/GHSA-56r3-m27m-8p62"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41,...",
  "type": "unreviewed",
  "updated_at": "2026-10-05T15:33:23Z",
  "url": "https://api.github.com/advisories/GHSA-56r3-m27m-8p62",
  "vulnerabilities": [],
  "withdrawn_at": null
}

—

CVSS

cvss

NVD

7.5

receipt

Source: NVD
Its words: 7.5
Read by: field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since: 2026-10-05 18:25 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-05 18:25 UTC	7.5
2026-10-04 06:13 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Cvss4

cvss4

NVD

8.7

receipt

Source: NVD
Its words: 8.7
Read by: field:cve.metrics.cvssMetricV40[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV40[].cvssData.baseScore
Said since: 2026-10-06 12:31 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:31 UTC	8.7
2026-10-04 06:13 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Cvss4 vector

cvss4_vector

NVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

receipt

Source: NVD
Its words: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Read by: field:cve.metrics.cvssMetricV40[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV40[].cvssData.vectorString
Said since: 2026-10-06 12:31 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:31 UTC	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
2026-10-04 06:13 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CVSS vector

cvss_vector

NVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

receipt

Source: NVD
Its words: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Read by: field:cve.metrics.cvssMetricV31[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV31[].cvssData.vectorString
Said since: 2026-10-06 12:31 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:31 UTC	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2026-10-04 06:13 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CWE

cwe

GitHub advisories

CWE-119

receipt

Source: GitHub advisories
Its words: CWE-119
Read by: field:cwes[].cwe_id
Said since: 2026-10-05 00:16 UTC
Last answered: 2026-10-06 13:46 UTC
Original: open at the source

2026-10-05 00:16 UTC	CWE-119
2026-10-04 12:12 UTC	—

What the source handed over

{
  "comments": 0,
  "credits": [],
  "cve_id": "CVE-2026-88779",
  "cvss": {
    "score": 7.5,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.5,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
    },
    "cvss_v4": {
      "score": 8.7,
      "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-119",
      "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
    }
  ],
  "description": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.",
  "epss": {
    "percentage": 0.00276,
    "percentile": 0.18203
  },
  "ghsa_id": "GHSA-56r3-m27m-8p62",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-56r3-m27m-8p62",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-56r3-m27m-8p62"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-88779"
    }
  ],
  "nvd_published_at": "2026-10-04T04:16:43Z",
  "published_at": "2026-10-04T06:34:12Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
    "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174",
    "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway",
    "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779",
    "https://github.com/advisories/GHSA-56r3-m27m-8p62"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41,...",
  "type": "unreviewed",
  "updated_at": "2026-10-05T15:33:23Z",
  "url": "https://api.github.com/advisories/GHSA-56r3-m27m-8p62",
  "vulnerabilities": [],
  "withdrawn_at": null
}

—

CWE

cwe

CISA Known Exploited Vulnerabilities

CWE-119

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: CWE-119
Read by: field:cwes
Said since: 2026-10-06 12:19 UTC
Last answered: 2026-10-06 13:22 UTC

2026-10-06 12:19 UTC	CWE-119
2026-10-04 23:17 UTC	—

What the source handed over

{
  "cveID": "CVE-2026-88779",
  "cwes": "CWE-119",
  "dateAdded": "2026-10-04",
  "dueDate": "2026-10-07",
  "forensicTriage": "Yes",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
  "product": "NetScaler",
  "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "shortDescription": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.",
  "vendorProject": "Citrix",
  "vulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability"
}

—

CWE

cwe

NVD

CWE-119

receipt

Source: NVD
Its words: CWE-119
Read by: field:cve.weaknesses[].description[].value
Said since: 2026-10-06 12:31 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:31 UTC	CWE-119
2026-10-04 06:13 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CWES

cwes

CISA Known Exploited Vulnerabilities

CWE-119

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: CWE-119
Read by: field:cwes
Said since: 2026-10-04 23:17 UTC
Last answered: 2026-10-06 13:22 UTC

What the source handed over

{
  "cveID": "CVE-2026-88779",
  "cwes": "CWE-119",
  "dateAdded": "2026-10-04",
  "dueDate": "2026-10-07",
  "forensicTriage": "Yes",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
  "product": "NetScaler",
  "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "shortDescription": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.",
  "vendorProject": "Citrix",
  "vulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability"
}

—

Due date

due_date

CISA Known Exploited Vulnerabilities

2026-10-07

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: 2026-10-07
Read by: field:dueDate
Said since: 2026-10-04 23:17 UTC
Last answered: 2026-10-06 13:22 UTC

What the source handed over

{
  "cveID": "CVE-2026-88779",
  "cwes": "CWE-119",
  "dateAdded": "2026-10-04",
  "dueDate": "2026-10-07",
  "forensicTriage": "Yes",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
  "product": "NetScaler",
  "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "shortDescription": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.",
  "vendorProject": "Citrix",
  "vulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability"
}

—

Exploitation

exploitation

NVD

active

Reliable evidence that it is exploited in the wild.

receipt

Source: NVD
Its words: active
Read by: field:cve.metrics.ssvcV203[].ssvcData.options[].exploitation
Said since: 2026-10-06 12:31 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:31 UTC	active
2026-10-04 06:13 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Exploited

exploited

CISA Known Exploited Vulnerabilities

yes

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: yes
Read by: const:yes
Said since: 2026-10-04 23:17 UTC
Last answered: 2026-10-06 13:22 UTC

What the source handed over

{
  "cveID": "CVE-2026-88779",
  "cwes": "CWE-119",
  "dateAdded": "2026-10-04",
  "dueDate": "2026-10-07",
  "forensicTriage": "Yes",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
  "product": "NetScaler",
  "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "shortDescription": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.",
  "vendorProject": "Citrix",
  "vulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability"
}

—

Fixed in

fixed_in

NVD

14.1-73.41, 13.1-64.28, 13.1-37.282

receipt

Source: NVD
Its words: 14.1-73.41, 13.1-64.28, 13.1-37.282
Read by: field:cve.affected[].affectedData[].versions[status=affected].lessThan
Said since: 2026-10-06 12:31 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:31 UTC	14.1-73.41, 13.1-64.28, 13.1-37.282
2026-10-04 06:13 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Forensic triage

forensic_triage

CISA Known Exploited Vulnerabilities

true

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: Yes
Read by: field:forensicTriage
Said since: 2026-10-04 23:17 UTC
Last answered: 2026-10-06 13:22 UTC

What the source handed over

{
  "cveID": "CVE-2026-88779",
  "cwes": "CWE-119",
  "dateAdded": "2026-10-04",
  "dueDate": "2026-10-07",
  "forensicTriage": "Yes",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
  "product": "NetScaler",
  "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "shortDescription": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.",
  "vendorProject": "Citrix",
  "vulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability"
}

—

Known ransomware campaign use

known_ransomware_campaign_use

CISA Known Exploited Vulnerabilities

Unknown

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: Unknown
Read by: field:knownRansomwareCampaignUse
Said since: 2026-10-04 23:17 UTC
Last answered: 2026-10-06 13:22 UTC

What the source handed over

{
  "cveID": "CVE-2026-88779",
  "cwes": "CWE-119",
  "dateAdded": "2026-10-04",
  "dueDate": "2026-10-07",
  "forensicTriage": "Yes",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
  "product": "NetScaler",
  "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "shortDescription": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.",
  "vendorProject": "Citrix",
  "vulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability"
}

—

Product

product

different words

CISA Known Exploited Vulnerabilities

NetScaler

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: NetScaler
Read by: field:product
Said since: 2026-10-04 23:17 UTC
Last answered: 2026-10-06 13:22 UTC

What the source handed over

{
  "cveID": "CVE-2026-88779",
  "cwes": "CWE-119",
  "dateAdded": "2026-10-04",
  "dueDate": "2026-10-07",
  "forensicTriage": "Yes",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
  "product": "NetScaler",
  "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "shortDescription": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.",
  "vendorProject": "Citrix",
  "vulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability"
}

—

Product

product

different words

NVD

ADC

receipt

Source: NVD
Its words: ADC
Read by: field:cve.affected[].affectedData[].product
Said since: 2026-10-04 06:13 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Severity

severity

GitHub advisories

high

From 7.0 to 8.9.

receipt

Source: GitHub advisories
Its words: high
Read by: field:severity
Said since: 2026-10-04 12:12 UTC
Last answered: 2026-10-06 13:46 UTC
Original: open at the source

What the source handed over

{
  "comments": 0,
  "credits": [],
  "cve_id": "CVE-2026-88779",
  "cvss": {
    "score": 7.5,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.5,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
    },
    "cvss_v4": {
      "score": 8.7,
      "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-119",
      "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
    }
  ],
  "description": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.",
  "epss": {
    "percentage": 0.00276,
    "percentile": 0.18203
  },
  "ghsa_id": "GHSA-56r3-m27m-8p62",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-56r3-m27m-8p62",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-56r3-m27m-8p62"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-88779"
    }
  ],
  "nvd_published_at": "2026-10-04T04:16:43Z",
  "published_at": "2026-10-04T06:34:12Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
    "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174",
    "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway",
    "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779",
    "https://github.com/advisories/GHSA-56r3-m27m-8p62"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41,...",
  "type": "unreviewed",
  "updated_at": "2026-10-05T15:33:23Z",
  "url": "https://api.github.com/advisories/GHSA-56r3-m27m-8p62",
  "vulnerabilities": [],
  "withdrawn_at": null
}

—

Severity

severity

NVD

HIGH

From 7.0 to 8.9.

receipt

Source: NVD
Its words: HIGH
Read by: field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseSeverity || field:cve.metrics.cvssMetricV31[].cvssData.baseSeverity
Said since: 2026-10-06 12:31 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:31 UTC	HIGH
2026-10-04 06:13 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

high

Status

status

NVD

Analyzed

receipt

Source: NVD
Its words: Analyzed
Read by: field:cve.vulnStatus
Said since: 2026-10-05 18:25 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-05 18:25 UTC	Analyzed
2026-10-05 12:23 UTC	Undergoing Analysis
2026-10-04 06:13 UTC	Received

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Technical impact

technical_impact

NVD

partial

The attacker gains limited control, or limited information.

receipt

Source: NVD
Its words: partial
Read by: field:cve.metrics.ssvcV203[].ssvcData.options[].technicalImpact
Said since: 2026-10-06 12:31 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:31 UTC	partial
2026-10-04 06:13 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Vendor

vendor

different words

CISA Known Exploited Vulnerabilities

Citrix

receipt

Source: CISA Known Exploited Vulnerabilities
Last answered: 2026-10-06 13:22 UTC

What the source handed over

{
  "cveID": "CVE-2026-88779",
  "cwes": "CWE-119",
  "dateAdded": "2026-10-04",
  "dueDate": "2026-10-07",
  "forensicTriage": "Yes",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779",
  "product": "NetScaler",
  "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "shortDescription": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.",
  "vendorProject": "Citrix",
  "vulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability"
}

—

Vendor

vendor

different words

NVD

NetScaler

receipt

Source: NVD
Its words: NetScaler
Read by: field:cve.affected[].affectedData[].vendor
Said since: 2026-10-04 06:13 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "ADC",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "14.1-73.41 FIPS",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-37.282",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          },
          {
            "defaultStatus": "unaffected",
            "product": "Gateway",
            "vendor": "NetScaler",
            "versions": [
              {
                "lessThan": "14.1-73.41",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              },
              {
                "lessThan": "13.1-64.28",
                "status": "affected",
                "version": "0",
                "versionType": "Patch"
              }
            ]
          }
        ],
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"
      }
    ],
    "cisaActionDue": "2026-10-07",
    "cisaExploitAdd": "2026-10-04",
    "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
    "cisaVulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
                "matchCriteriaId": "6F6A3D5D-1861-4974-B091-26E87FB1D6B4",
                "versionEndExcluding": "13.1-37.282",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "1A3802BF-8836-4B1C-9C5E-BE6492D42847",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
                "matchCriteriaId": "92D219C6-E418-4AC1-9D9D-20F939914F0B",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
                "matchCriteriaId": "EBB3AD2A-AAE0-4A56-A36D-A327EB39792A",
                "versionEndIncluding": "14.1-73.41",
                "versionStartIncluding": "14.1-66.68",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "C4B364B5-3ED9-4C84-9D09-6C79D7A66E94",
                "versionEndExcluding": "13.1-64.28",
                "versionStartIncluding": "13.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "33BB8BC4-DFDF-4760-9C92-129615BE7831",
                "versionEndExcluding": "14.1-73.41",
                "versionStartIncluding": "14.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."
      }
    ],
    "id": "CVE-2026-88779",
    "lastModified": "2026-10-05T13:35:24.663",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-88779",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-04T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-04T04:16:43.680",
    "references": [
      {
        "source": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Mitigation",
          "Vendor Advisory"
        ],
        "url": "https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779"
      }
    ],
    "sourceIdentifier": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-119"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Every claim, by kind

vulnerability

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability zetlyn/cve-kev · 2026-10-04	cwe CWE-119 cwes CWE-119 due_date 2026-10-07 exploited yes forensic_triage true known_ransomware_campaign_use Unknown product NetScaler vendor Citrix
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability zetlyn/cve-nvd · 2026-10-04	automatable yes cvss 7.5 cvss4 8.7 cvss4_vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X cvss_vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H cwe CWE-119 exploitation active fixed_in 14.1-73.41, 13.1-64.28, 13.1-37.282 product ADC severity HIGH status Analyzed technical_impact partial vendor NetScaler	source
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41,... zetlyn/cve-ghsa · 2026-10-04	cvss 7.5 cwe CWE-119 severity high	source