CVE-2026-88772

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC versions prior to 14.1-73.37 Citrix NetScaler ADC versions prior to 13.1-64.23 Citrix NetScaler ADC versions prior to 14.1-73.37 FIPS Citrix NetScaler ADC versions prior to 13.1.37.279 FIPS and NDcPP Citrix NetScaler Gateway versions prior to 14.1-73.37 Citrix NetScaler Gateway versions prior to 13.1-64.23

Description An improper restriction of operations within the bounds of a memory buffer allows for remote code execution or a denial of service. This occurs when the software fails to properly validate the size of data being written to a memory buffer, potentially allowing an attacker to overwrite adjacent memory.

Recommendations Update Citrix NetScaler ADC to version 14.1-73.37 or later. Update Citrix NetScaler ADC to version 13.1-64.23 or later. Update Citrix NetScaler ADC FIPS to version 14.1-73.37 or later. Update Citrix NetScaler ADC FIPS and NDcPP to version 13.1.37.279 or later. Update Citrix NetScaler Gateway to version 14.1-73.37 or later. Update Citrix NetScaler Gateway to version 13.1-64.23 or later.