Research

Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

Part 1 of this week's saga can be found here. This research is a glimpse into the capabilities that power our Preemptive Exposure Management solution, enabling organizations to rapidly react to emerging threats: the watchTowr Platform. What Is A Citrix NetScaler? NetScaler, from Citrix (now under Cloud

Read at watchTowr Labs

Vendor

Citrix

Product

NetScaler ADC / Gateway

EPSS

0.78 (p100)

Exposure class

Edge / VPN / firewall

• watchTowr Labs (labs.watchtowr.com)
• CVE-2026-88772 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-88771 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-88773 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-88774 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-88775 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 74
   Research Rapid7 12d ago

   Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

   Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88779CVE-2026-88772 Citrix Rapid7
2. 47
   Research Cloudflare 12d ago

   Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

   EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix
3. 92
   Research ThreatLabz 15d ago

   CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability

   Exploited CVSS 9.8 EPSS 0.82 CVE-2026-88771CVE-2026-107406CVE-2026-75650 Citrix
4. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
5. 97
   Threat signal FortiGuard 23d ago

   Citrix NetScaler RCE zero-day Vulnerabilities

   Exploited CVSS 9.5 EPSS 0.78 Fix available CVE-2026-88771CVE-2026-88772 Citrix
6. 22
   Research Check Point Research 26d ago

   5th October – Threat Intelligence Report

   EPSS 0.26 CVE-2026-88771CVE-2026-88772CVE-2026-76504+2 more
7. 74
   Research Unit 42 30 Sep 2026

   Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)

   Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix
8. 74
   Threat intelligence Google TIG 29 Sep 2026

   Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances

   Exploited EPSS 0.78 CVE-2026-88772CVE-2026-88771CVE-2026-88778 Google Citrix
9. 49
   watchTowr Labs watchTowr 28 Sep 2026

   Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)

   EPSS 0.78 CVE-2026-88771CVE-2026-88772CVE-2026-88773+5 more Citrix
10. 74
    Research Sophos X-Ops 28 Sep 2026

    Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation

    Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix
11. 18
    CVE NVD 27 Sep 2026

    Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88778 Citrix
12. 18
    CVE NVD 27 Sep 2026

    Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88777 Citrix
13. 18
    CVE NVD 27 Sep 2026

    Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88776 Citrix
14. 18
    CVE NVD 27 Sep 2026

    Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88775 Citrix
15. 18
    CVE NVD 27 Sep 2026

    Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88774 Citrix
16. 18
    CVE NVD 27 Sep 2026

    Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

    CVE-2026-88773 Citrix
17. 90
    KEV NVD 27 Sep 2026

    Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

    KEV · due 30 Sep 2026 (overdue) EPSS 0.78 Fix available CVE-2026-88772 Citrix
18. 90
    KEV NVD 27 Sep 2026

    Citrix NetScaler Improper Input Validation Vulnerability

    KEV · due 30 Sep 2026 (overdue) EPSS 0.82 Fix available CVE-2026-88771 Citrix
19. 80
    CISA alert CISA 27 Sep 2026

    Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

    Exploited EPSS 0.78 No fix yet CVE-2026-107406CVE-2026-88779CVE-2026-88771+7 more Citrix
20. 80
    CISA alert CISA 27 Sep 2026

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    Exploited EPSS 0.78 CVE-2026-88771CVE-2026-88772 Citrix