Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

CVE-2026-88779 affects Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway). The vulnerability involves an improper restriction of operations within the bounds of a memory buffer, which could allow an attacker to cause a denial of service condition. The issue has been flagged by CISA and is subject to BOD 26-04, which prioritizes security updates based on risk. Citrix has published security advisories and knowledge base articles detailing the vulnerability and remediation steps. Organizations using affected Citrix NetScaler products are urged to apply patches promptly. The vulnerability has been assigned a high criticality rating. CISA has also outlined forensic triage requirements as part of the BOD 26-04 implementation guidance. The NVD entry provides additional technical details on the vulnerability.