CVE-2026-88773

Vendor

Citrix

Product

NetScaler ADC / Gateway

EPSS

0.78 (p100)

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 80
   CISA alert CISA 27 Sep 2026

   Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

   Update October 9, 2026 : CISA has updated this Alert to: (1) include CVE-2026-107406; (2) include CVE-2026-88779 following its addition to the KEV Catalog on Oct. 4, 2026; (3) clarify the potential relationship between…

   Exploited EPSS 0.78 No fix yet CVE-2026-107406CVE-2026-88779CVE-2026-88771+7 more Citrix
2. 49
   watchTowr Labs watchTowr 29 Sep 2026

   Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

   Part 1 of this week's saga can be found here. This research is a glimpse into the capabilities that power our Preemptive Exposure Management solution, enabling organizations to rapidly react to emerging threats: the watchTowr…

   EPSS 0.78 CVE-2026-88772CVE-2026-88771CVE-2026-88773+6 more Citrix
3. 49
   watchTowr Labs watchTowr 28 Sep 2026

   Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)

   God damn it, we're back in the room again. Yes, that sound in your ears is screaming. The footgun has gone off again, shockingly, and we are yet again dealing with a situation where the entire world apparently knew about Citrix…

   EPSS 0.78 CVE-2026-88771CVE-2026-88772CVE-2026-88773+5 more Citrix
4. 18
   CVE NVD 27 Sep 2026

   Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

   Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37…

   CVE-2026-88773 Citrix