{"id":"CVE-2026-88776","published":"2026-09-27T17:16:56.870","lastModified":"2026-09-29T17:17:11.850","description":"Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23  leading to unpredictable or erroneous behavior or Denial of Service","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-119"],"vendors":["citrix"],"products":["netscaler application delivery controller","netscaler gateway"],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is a memory overflow vulnerability in Citrix NetScaler ADC and Gateway, which can lead to Denial of Service (DoS). This issue is critical as it can be exploited to crash the affected systems, rendering them unusable.","exploitability":"Exploitation is relatively straightforward given the memory overflow nature, requiring the attacker to send a crafted payload to the affected NetScaler ADC or Gateway version.","blast_radius":"If exploited, the impact is significant as it can result in a complete denial of service for the affected systems, affecting business operations and user access.","remediation":"Upgrade to Citrix NetScaler ADC version 14.1-73.37 or later, and Citrix NetScaler Gateway version 14.1-73.37 or later, as these versions address the vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","memory-overflow","citrix","adc","gateway"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-29T08:51:45.284Z"}}