CISA KEV: Citrix NetScaler — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Sunday, September 27, 2026 at 12:00 AM UTC·Source: CISA KEV

Updated: Sunday, September 27, 2026 at 10:00 PM UTC

Executive Summary

Analysis

Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-27. Remediation due: 2026-09-30.

Indicators of Compromise (1)

CVE (1)

CVE-2026-88772

NVD MITRE CVE

Source Attribution

Originally published by CISA KEV on Sep 27, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerability

SBI Group and Mesh prep digital asset JV

Japan's SBI Group is teaming up with crypto infrastructure provider Mesh Connect and Money Forward on a digital asset joint venture.

2h agoFinextra

CRITICALVulnerability

NVD CRITICAL: CVE-2026-108860 — BotSharp through 5.2.0 contains an authentication bypass vulnerability that allo...

BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json. Attackers can sign tokens with the committed HMAC secret and fixed botsharp issuer and audience to impersonate any known user, including administrators, on Authorize-protected API routes.

CVE-2026-108860

11h agoNIST NVD

MEDIUMVulnerability

The Luna Moth Files Weren’t Hacked. Here’s How They Leaked.

When asked about the “Luna Moth Files” that had mysteriously appeared online, Silent Ransom Group called them “fake” and insisted they hadn’t had any leak or breach. But they had. Here’s what we know. When the “Luna Moth Files” appeared on an onion site without anyone claiming responsibility or explaining their origin, DataBreaches asked a... Source

12h agoDataBreaches.net