29 September 2026
Reference: CVE-2026-88775
1. What is being reported?
Security researchers have discovered a memory overflow vulnerability in certain versions of Citrix NetScaler ADC and Gateway. This flaw can cause the devices to behave unpredictably or stop working, potentially leading to a denial of service where legitimate users cannot access services.
2. What this means in plain English
If your organisation uses the affected Citrix products, attackers could exploit this flaw to interrupt your network services. This might mean your website or remote access tools become unavailable, affecting your ability to operate normally.
3. Could this affect a small business?
Small businesses using Citrix NetScaler ADC or Gateway in the specified older versions could be at risk. If you do not use these Citrix products, or your software is up to date, this vulnerability likely does not affect you.
4. What to do now
- Check if your organisation uses Citrix NetScaler ADC or Gateway products.
- Verify the software version and see if it is one of the affected versions listed.
- Contact your IT provider or software supplier to arrange prompt updates or patches.
- Monitor your systems for unusual behaviour and ensure backups are current in case of disruption.
5. Ask your IT provider
Can you confirm whether our Citrix NetScaler ADC or Gateway devices are affected by CVE-2026-88775, and if so, what steps are being taken to apply the necessary updates or mitigations?
6. Bottom line
If you use Citrix NetScaler ADC or Gateway, act quickly to update your systems and avoid potential service disruptions.
Information based on CISA KEV, NVD, and reputable security reports.