Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix NetScaler ADC and NetScaler Gateway contain a critical memory buffer bounds restriction vulnerability (CVE-2026-88772) that could allow remote code execution or denial of service. The vulnerability is tracked by CISA and is part of a broader set of CVEs (CVE-2026-88771 through CVE-2026-88778) affecting Citrix NetScaler products. Organizations are directed to run provided IOCs in the NetScaler console to identify indicators of exploitation. Customers must conduct forensic triage as mandated by BOD 26-04 and follow Citrix's published mitigation guidance. CISA has assigned a high criticality rating to this vulnerability given its potential for remote code execution. Multiple remediation and forensic resources have been published by both Citrix and CISA to assist affected organizations.