Product by Citrix Netscaler
Gateway
8 known vulnerabilities in Gateway (Citrix Netscaler), 2 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-88771 | Citrix NetScaler Improper Input Validation Vulnerability In CISA KEValso in 7 other products | 9.8 | |
| Critical | CVE-2026-88772 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service In CISA KEValso in 7 other products | 8.1 | |
| Critical | CVE-2026-88773 | HTTP Request Smuggling | 10.0 | |
| Critical | CVE-2026-88777 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service | 9.8 | |
| Critical | CVE-2026-88776 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service | 9.8 | |
| Critical | CVE-2026-88775 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service | 9.8 | |
| High | CVE-2026-88778 | TCP Initial Sequence Number (ISN) prediction | 7.5 | |
| High | CVE-2026-88774 | Feature policy bypass due to improper HTTP URL based expression usage | 7.2 |
News
- Citrix warns of actively exploited NetScaler flaw days after zero-day patch rushcsoonline,
- Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attackssecurityweek,
- NCSC-2026-0394 [1.01] [H/H] Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gatewayncsc-nl,
- Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Executionthehackernews,
- Hackers exploit Citrix NetScaler zero-day to deploy web shellsbleepingcomputer,
- NetScaler admins told to patch critical zero-days in ADC and Gateway nowcsoonline,