CVE-2026-88778

High7.5Published on September 27, 2026

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23.

CVSS score7.5 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness type (CWE)CWE-342

Vendorscitrix

Affected products

Vendors	Product	Versions
citrix	netscaler application delivery controller	< 13.1-64.23
citrix	netscaler gateway	< 13.1-64.23

Vulnerabilities

NetScaler Zero-Days Put Patch Speed and Shutdown Advice to the Test

Citrix patched eight NetScaler flaws, including two exploited zero-days, sparking debate over immediate upgrades versus taking systems offline.

Oct 3, 202611:415 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

NetScaler Zero-Days Put Patch Speed and Shutdown Advice to the Test