HIGHpublic-safe

CVE-2026-88779

NVD: Vulnerability in NetScaler ADC and NetScaler Gateway. NVD: This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28. NVD: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

CVSS
8.7 Severity
HIGH EPSS
0.0059 (47) KEV
yes

Source-published summary

Possible impact

This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for known exploited catalog listed.

Affected context

vendor/product: citrix / netscaler_application_delivery_controller

Remediation / advisory

Remediation reference present; patch status requires confirmation in the linked advisory.

Why it matters

This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for known exploited catalog listed.; CVSS 8.7 (HIGH); EPSS percentile 47; KEV listed; Remediation reference present; patch status requires confirmation in the linked advisory; sources: NVD, Vendor Advisory.

What to verify

Prioritize KEV confirmation, Confirm affected product/version, vendor advisory, patch or mitigation, and exposure.

Exposure hint

exposure unknown

Impact tags

明示タグなし

Urgency reasons

CVSS HIGHKEV listedaffected product presentvendor advisory presentrecent updateremediation reference present

Source-derived note

Summary derived from NVD / Vendor Advisory description; unsafe procedural detail is not shown.

Redaction metadata

source summary used: True
fallback summary used: False
unsafe procedural detail present: false
raw source displayed: false
public summary redacted: true

Remediation handoff

Public-safe static handoff for human/Codex remediation planning. Scan, patch, external execution, and auto remediation are disabled.

Handoff JSON Handoff Markdown Safe Codex prompt

Safety note

This radar shows source-published defensive context only. Exploit procedures, exploit strings, scanner commands, and auto-remediation are not provided.