CVE-2026-88775

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

High8.8EPSS 0.72%

Published: 27 Sept 2026
Updated: 29 Sept 2026
Reserved: 10 Sept 2026
Assigned by: NetScaler

Description

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Timeline

2026
10 Sept 2026
10 Sept 2026
ID reserved
By NetScaler
27 Sept 202617 days later
27 Sept 2026· 17 days later
Published
29 Sept 20262 days later
29 Sept 2026· 2 days later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2026-88775, by who scored it
Scored by	CVSS	Score	Vector
NetScalerCNA (assigner)	4.0	High8.8	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
NVDNVD · Modified	4.0	High8.8	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (exploitation in 30 days): 0.72% · top 46% of all CVEs (7 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: yes · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.

Weakness

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (opens in a new tab)All about CWE-120 and its CVEs

Affected products

Citrix NetScaler · ADC
- affected < 14.1-73.37
- affected < 13.1-64.23
- affected < 14.1-73.37 FIPS
- affected < 13.1.37.279 FIPS and NDcPP
Citrix NetScaler · Gateway
- affected < 14.1-73.37
- affected < 13.1-64.23

References (1)

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778 (opens in a new tab)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2026-88775](https://trackcve.app/badge/CVE-2026-88775.svg)](https://trackcve.app/cve/CVE-2026-88775)

Record last updated 29 Sept 2026, 15:15 UTC.