Detections
Analytics

CVE-2026-88779

high

Description

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

References

https://www.securityweek.com/citrix-urges-immediate-patching-of-critical-netscaler-vulnerability/

https://www.databreachtoday.com/citrix-ships-another-emergency-fix-for-netscaler-appliances-a-33054

https://www.bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately/

https://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.html

https://securityaffairs.com/200670/security/cve-2026-107406-citrix-fixes-critical-netscaler-adc-and-gateway-vulnerability.html

https://www.hipaajournal.com/citrix-patches-third-actively-exploited-netscaler-zero-day/

https://www.theregister.com/security/2026/10/05/citrix-netscaler-security-snafus-get-even-worse-amid-more-0-day-reports/5301232

https://www.sophos.com/en-us/blog/citrix-netscaler-vulnerability-cve-2026-88779-in-active-exploitation

https://www.infosecurity-magazine.com/news/citrix-netscaler-zero-day/

https://www.helpnetsecurity.com/2026/10/05/cisa-flags-new-exploited-netscaler-flaw-as-attackers-crash-appliances-cve-2026-88779/

https://www.databreachtoday.com/citrix-patches-yet-another-under-fire-zero-day-in-netscaler-a-33017

https://therecord.media/us-australia-warn-of-latest-citrix-vulnerability

https://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.html

https://securityaffairs.com/200414/security/u-s-cisa-adds-citrix-netscaler-flaw-to-its-known-exploited-vulnerabilities-catalog-3.html

https://cyberscoop.com/citrix-netscaler-third-exploited-zero-day-vulnerability/

https://www.securityweek.com/exploitation-of-citrix-netscaler-zero-day-hits-appliances-patched-days-earlier/

https://www.cisa.gov/news-events/alerts/2026/10/04/cisa-adds-one-known-exploited-vulnerability-catalog

https://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/

https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/

https://www.theregister.com/security/2026/10/09/citrix-gives-netscaler-admins-another-critical-reason-to-patch/5302212

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92065

Details

Source: Mitre, NVD

Published: 2026-10-04

Updated: 2026-10-05

Named Vulnerability: PitScaler 2Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

CVSS v4

Base Score: 8.7

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Severity: High

EPSS

EPSS: 0.11388

Vulnerability Watch

Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.

Vulnerability of Interest