CVE Alert: CVE-2026-88772 – Citrix NetScaler

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

Risk verdict:** Treat as **priority 1

**Why this matters:** Successful exploitation could give an attacker control of the appliance or disrupt its service, affecting both traffic delivery and remote access. Because the assessed impact extends to connected systems, compromise may also support further intrusion; service outages could interrupt customer access or business operations.

**Most likely attack path:** An attacker can reach the vulnerable service over a network without credentials or user interaction, but high attack complexity may make exploitation dependent on specific conditions or less reliable. The potential impact beyond the appliance makes segmentation important: a compromised gateway or controller could provide a route towards protected internal systems.

**Who is most exposed:** Organisations using internet-facing application delivery controllers or remote-access gateways are most exposed, particularly where management interfaces or services are broadly reachable.

Review appliance logs for unusual requests, crashes, restarts or memory-related errors.

Alert on unexpected configuration changes, processes or outbound connections.

Check authentication and network logs for activity originating from appliance addresses.

Investigate unexplained service interruptions or changes in traffic patterns.

Mitigation and prioritisation:

Expedite the vendor’s security update through emergency change control; verify all deployed appliances are covered.

Restrict access to management interfaces and minimise unnecessary network exposure.

Isolate appliances from sensitive internal networks where operationally feasible.

If patching is delayed, apply vendor-recommended mitigations and increase monitoring; validate service health after changes.

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.