Search/CVE-2026-88779
● CVE — High

CVE-2026-88779

VendorcitrixProductnetscaler application delivery controller, netscaler gatewayDiscoveredOct 4, 2026UpdatedOct 5, 2026

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

View graph Watch Export
CVSS v3.1
7.5 HIGH
EPSS
0.59%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
9
sources referencing this CVE
Related IOCs
2
seen in the same coverage
EPSS Trend
Oct 5, 2026 → Oct 7, 2026
▲ 0.32pp
0.28% → 0.59% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Connections
14 relationships
Timeline
disclosure → media coverage
Oct 4, 2026
Disclosure — published as a CVE record.
Oct 4, 2026
acn.gov.it reports: Vulnerabilità in prodotti Citrix NetScaler
Oct 4, 2026
bleepingcomputer.com reports: Citrix patches NetScaler SAML zero-day exploited in attacks
Oct 5, 2026
securityweek.com reports: Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier
Oct 5, 2026
thehackernews.com reports: New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
Oct 5, 2026
infosecurity-magazine.com reports: Citrix NetScaler Targeted Via New Zero Day
Oct 5, 2026
thehackernews.com reports: ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
Oct 5, 2026
helpnetsecurity.com reports: CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)
Oct 5, 2026
therecord.media reports: US, Australia warn of latest Citrix vulnerability after NetScaler advisory
Oct 5, 2026
theregister.com reports: Citrix NetScaler security snafus get even worse amid more 0-day reports