🛡️ CVE-2026-88779

The items that name it 9

• This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
  article2026-10-27It is written here as CVE-2026-88779 through CVE-2026-88787: range of reserved CVE IDs not yet published as of writing, which the page suggests may signal further Citrix advisories.
• Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
  advisory2026-10-09

  Zero-day in NetScaler leading to denial-of-service (DoS), disclosed days before CVE-2026-107406

• Making sure the checks get printed
  article2026-10-08

  Memory overflow bug in Citrix NetScaler leading to denial of service attacks

• Post-Exploitation Analysis & Artifacts – Citrix NetScaler CVE-2026-88771
  writeup2026-10-07
• Citrix NetScaler Zero-Day Exploited in the Wild Crashes SAML Authentication Services
  advisory2026-10-05

  High-severity memory overflow (CWE-119) in the nsaaad SAML authentication handler of Citrix NetScaler ADC and NetScaler Gateway, allowing unauthenticated attackers to crash the SAML authentication service via crafted network requests, locking out VPN and SSO access; some researchers suspect possible

• Cyber Security News (@The_Cyber_News) on X
  advisory2026-10-05

  Memory overflow vulnerability in Citrix NetScaler SAML implementation; can cause denial of service. CVSS v4.0 score of 8.7. Affects appliances configured as a SAML service provider or identity provider. Actively exploited as a zero-day; Citrix confirmed targeted attacks against unmitigated deploymen

• Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772
  advisory2026-09-28

  NetScaler vulnerability disclosed by Citrix on October 4, 2026, affecting appliances with SAML service provider (SP) or identity provider (IdP) configured; attackers can send repeated attempts that crash the SAML service, and upon the sixth crash the appliance reboots. Disclosed as exploited in-the-

• Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
  advisory
• Known Exploited Vulnerabilities Catalog | CISA
  otherIt is written here as CVE-2026-88779 (Citrix NetScaler ADC and Gateway; CWE-119; added 2026-10-04, due 2026-10-07).

  Citrix NetScaler ADC and Gateway; CWE-119; added 2026-10-04, due 2026-10-07