CVE-2026-88776: Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service
Affected Software
Event History
Frequently Asked Questions
What minimum release should be used to remediate affected deployments?
ADC deployments should be updated to 14.1-73.37 or later, or 13.1-64.23 or later. ADC FIPS should be updated to 14.1-73.37 FIPS or later, while ADC 13.1 FIPS and NDcPP should be updated to 13.1.37.279 or later; Gateway deployments should be updated to 14.1-73.37 or later or 13.1-64.23 or later.
Does the available information identify exploit prerequisites, affected default settings, or temporary mitigations?
No. The provided information does not state whether authentication, network access, a specific feature configuration, or non-default settings are required, and it does not provide a workaround for systems that cannot yet be updated.