CVE-2026-88775: Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
Published Sep 27, 2026
·Updated
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
Affected Software
3 affected components
Citrix NetScaler ADC<14.1-73.37, <13.1-64.23
Citrix NetScaler ADC FIPS and NDcPP<14.1-73.37, <13.1.37.279
Citrix NetScaler Gateway<14.1-73.37, <13.1-64.23
Event History
Sep 27, 2026
CVE Published
via MITRE·04:21 PM
Data Sourced
via MITRE·04:21 PM
Description
Data Sourced
via NVD·05:16 PM
DescriptionSeverity
Frequently Asked Questions
1
Which product versions need to be remediated?
Citrix NetScaler ADC is affected before 14.1-73.37 and 13.1-64.23. ADC FIPS and NDcPP editions are affected before 14.1-73.37 FIPS and 13.1.37.279 FIPS and NDcPP; Citrix NetScaler Gateway is affected before 14.1-73.37 and 13.1-64.23.
2
What is the documented impact?
The vulnerability is a memory overflow that can cause unpredictable or erroneous behavior or denial of service.