By Zeljka Zorz
Publication Date: 2026-10-05 14:53:00
CISA has added another Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog on Sunday: CVE-2026-88779, a memory overflow bug that may cripple vulnerable NetScaler ADCs and Gateways.
“Citrix has observed targeted attacks on unmitigated NetScaler deployments which can lead to Denial of Service. If the condition is triggered repeatedly, the service may remain unavailable,” the vendor stated.
“Our analysis indicates that this issue affects service availability, and we have not identified an impact on the integrity of customer data.”
Attacks observed after patching spree
Bishop Fox and watchTowr researchers have been credited with flagging CVE-2026-88779, and the latter have reproduced it, but have yet to share technical details.
Reddit users have been reporting that their organizations’ NetScaler appliances have been hit by crashes and reboots after they’ve upgraded to patch eight vulnerabilities, including two actively exploited zero-days:…
