CVE-2026-88777: Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
Published Sep 27, 2026
·Updated
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service
Affected Software
9 affected components
Citrix NetScaler ADC<14.1-73.37, <13.1-64.23, <14.1-73.37 FIPS, <13.1.37.279 FIPS and NDcPP
Citrix NetScaler Gateway<14.1-73.37, <13.1-64.23
Citrix NetScaler Application Delivery Controller>=13.1<13.1-64.23
Citrix NetScaler Application Delivery Controller>=13.1<13.1.37.279
Citrix NetScaler Application Delivery Controller>=13.1<13.1.37.279
Citrix NetScaler Application Delivery Controller>=14.1<14.1-73.37
Citrix NetScaler Application Delivery Controller>=14.1-66.68<=14.1-73.37
Citrix NetScaler Gateway>=13.1<13.1-64.23
Citrix NetScaler Gateway>=14.1<14.1-73.37
Event History
Sep 27, 2026
CVE Published
via MITRE·04:37 PM
Data Sourced
via MITRE·04:37 PM
Description
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Which NetScaler releases need to be remediated?
NetScaler ADC is affected before 14.1-73.37 or 13.1-64.23. ADC FIPS and NDcPP editions are affected before 14.1-73.37 FIPS or 13.1.37.279 FIPS and NDcPP; NetScaler Gateway is affected before 14.1-73.37 or 13.1-64.23.
2
What impact is documented for affected appliances?
The documented impact is unpredictable or erroneous behavior or denial of service.