Buffer overflow in Citrix Netscaler Application Delivery Controller
CVE-2026-88772
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS 0.766, 99.5th percentile (scored ); up from 0.013 30 days earlier. About EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.766 · change: +0.753
Affected products
Weakness classification (CWE)
CISA KEV (Known Exploited Vulnerabilities)
This CVE is on the CISA KEV catalog, added on . CISA KEV inclusion means CISA has confirmed in-the-wild exploitation; US federal agencies are required to remediate within a published due date.
BOD 22-01 due date: .
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Browse the full CISA KEV catalog with PoC counts, Metasploit modules and EPSS.
Public exploits and proof-of-concept code
Metasploit modules
9 public repositories with exploit or proof-of-concept code for this CVE:
- murrez/CVE-2026-88772 (13 stars, last pushed 2026-10-20): CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP/443 DTLS probe. CTX697096; active exploitation r…
- watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 (11 stars, last pushed 2026-09-29)
- CompleTech-Security/netscaler-cve-2026-88772-check (last pushed 2026-10-26): Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
- CompleteTech-Security/netscaler-cve-2026-88772-check (last pushed 2026-10-26): Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
- CompleTetech-Security/netscaler-cve-2026-88772-check (last pushed 2026-10-26): Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
- CompleteTech-Security/netscaler-pitscaler-cve-2026-88772-check (last pushed 2026-10-26): Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
- completetech-security/netscaler-cve-2026-88772-check (last pushed 2026-10-24): Offline evidence checker for NetScaler DTLS CVE-2026-88772. Per-vserver configuration and firmware assessment; standalone Python; no exploit payloads.
- CompleteTech-LLC/netscaler-cve-2026-88772-check (last pushed 2026-10-23): Offline evidence checker for NetScaler DTLS CVE-2026-88772. Per-vserver configuration and firmware assessment; standalone Python; no exploit payloads.
- FollowerSeize/CVE-2026-88772-POC (last pushed 2026-09-28): CVE-2026-88772 - Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS)
References
- support.citrix.com/support-home/kbsearch/article (Vendor Advisory)
- www.cisa.gov/known-exploited-vulnerabilities-catalog (US Government Resource)
This CVE has public exploit evidence. See the latest CVEs with public exploits.