By Divya
Publication Date: 2026-10-05 10:46:00
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-88779, a high-severity vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway appliances, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation.
Tracked as CVE-2026-88779, this vulnerability involves an improper restriction of operations within the bounds of a memory buffer, also referred to as CWE-119. It can allow an unauthenticated, remote attacker to trigger a denial-of-service condition on vulnerable NetScaler appliances.
Citrix NetScaler Flaw
NetScaler has assigned the flaw a CVSS v4 score of 8.7, categorizing it as High. The CVSS vector indicates that exploitation is network-accessible and requires low attack complexity, no privileges, and no user interaction. The primary impact reported is on system availability.
CISA included this vulnerability in its KEV Catalog on October 4, 2026, mandating that U.S. federal civilian…
