Weaponized CVE-2026-88772 Targets Citrix NetScaler ADC and Gateway

## Overview Citrix NetScaler ADC and Citrix NetScaler Gateway are vulnerable to CVE-2026-88772. This vulnerability allows attackers to execute remote code or cause a denial of service. The exploit is weaponized and has been observed in the wild. Affected versions include ADC before 14.1-73.37, 13.1-64.23, and their FIPS counterparts. Gateway versions before 14.1-73.37 and 13.1-64.23 are also impacted. ## Technical Details CVE-2026-88772 stems from improper input validation in the affected Citrix products. Attackers can exploit this flaw to execute arbitrary code or crash the service. The high CVSS score of 9.5 indicates a critical risk. Organizations using vulnerable versions should prioritize immediate action. ## Impact Successful exploitation of this vulnerability can lead to severe consequences. Attackers may gain control over affected systems, leading to data breaches or service outages. The potential for remote code execution makes this flaw particularly dangerous. Organizations must assess their exposure to this vulnerability. ## Mitigation Defenders should update Citrix NetScaler ADC and Gateway to the latest versions immediately. Citrix has released patches for the affected software. Ensure that all systems are running versions 14.1-73.37 or 13.1-64.23 or later. Additionally, monitor network traffic for unusual activity that may indicate exploitation attempts. Regularly review security policies and ensure that all systems are up to date.