Canadian Centre for Cyber Security cyber.gc.ca

Citrix security advisory (AV26-996)

Imported from official source

October 05, 2026 11:45

Cybersecurity Classified by Officially

Serial Number: AV26-996
Date: October 5, 2026

As of October 4, 2026, Citrix is affected by a vulnerability in the following products:

NetScaler ADC
- Prior to 13.1-37.282
- Prior to 13.1-64.28
- Prior to 14.1-73.41
- Prior to 14.1-73.41 FIPS
NetScaler Gateway
- Prior to 13.1-64.28
- Prior to 14.1-73.41

Citrix indicates that CVE-2026-88779 is exploited in the wild.

On October 4, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-88779 to their Known Exploited Vulnerabilities (KEV) Catalog.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

This is an extract. The publication continues at the source.

Source: Canadian Centre for Cyber Security. Licence

Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-996

Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: Canadian Centre for Cyber Security — imported from official source
Official source: https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
Imported: October 05, 2026 12:00
Versions: 1 recorded
Identity: https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-996