30 September 2026
Reference: CVE-2026-88778
1. What is being reported?
The vulnerability involves Citrix NetScaler ADC and Gateway devices, which are used to manage and secure internet traffic for many organisations. The flaw allows attackers to predict certain security values, potentially letting them bypass protections and access your network without permission.
2. What this means in plain English
If your organisation uses these Citrix products, hackers could exploit this weakness to break into your systems remotely. This could lead to data theft, disruption of services, or further attacks on your business IT infrastructure.
3. Could this affect a small business?
Small businesses and charities using Citrix NetScaler ADC or Gateway versions released before the fixed updates may be at risk. If you do not use these products, or your IT provider has already applied the latest updates, you are likely not affected.
4. What to do now
- Check with your IT provider if your Citrix NetScaler ADC or Gateway devices are in use and which versions are installed.
- Ensure that the latest security updates or patches for these Citrix products have been applied immediately.
- If you do not use Citrix NetScaler products, confirm this with your IT provider to rule out exposure.
- Monitor your network for any unusual activity and report concerns promptly to your IT support.
5. Ask your IT provider
Can you confirm whether our Citrix NetScaler ADC or Gateway devices are affected by CVE-2026-88778, and have the necessary security updates been applied?
6. Bottom line
If you use Citrix NetScaler ADC or Gateway, act quickly to update and protect your systems from active attacks.
Information based on CISA KEV, NVD, and reputable security reporting.