Our takeCISA added CVE-2026-88779 to its KEV catalog: a memory-buffer flaw in Citrix NetScaler ADC and Gateway that is actively exploited and can cause denial of service. Patch or apply the vendor mitigations now if you run these appliances.Security Resilience desk
Sources (4)
- cisa_kev · cisa_kev
- cisa_advisories · cisa_advisories
- securityweek · securityweek
- cyberscoop · cyberscoop
What this means for you — Security leader:CISA added CVE-2026-88779 (memory buffer flaw in Citrix NetScaler ADC and Gateway) to its KEV catalog. It is confirmed exploited in the wild and can cause denial of service; apply the vendor mitigations immediately and ensure compliance with BOD 22-01 / 26-04.
What this means for you — Lean IT orgs:If you run Citrix NetScaler ADC or Gateway, this vulnerability is confirmed exploited in the wild and can take the appliance offline. Check the version you have and apply Citrix's fix or mitigation right away.
What this means for you — MSP:CVE-2026-88779 in Citrix NetScaler ADC and Gateway is now in CISA KEV (confirmed exploited). Review every client appliance, apply the vendor patch or mitigation, and confirm BOD 22-01 compliance.
What this means for you — Researcher:CISA added CVE-2026-88779 (improper restriction of operations within a memory buffer in Citrix NetScaler ADC/Gateway) to KEV. Confirmed exploited in the wild and results in denial of service.