Citrix security advisory (AV26-996)

Serial Number: AV26-996Date: October 5, 2026 As of October 4, 2026, Citrix is affected by a vulnerability in the following products: NetScaler ADC Prior to 13.1-37.282 Prior to 13.1-64.28 Prior to 14.1-73.41 Prior to 14.1-73.41 FIPS NetScaler Gateway Prior to 13.1-64.28 Prior to 14.1-73.41 Citrix indicates that CVE-2026-88779 is exploited in the wild. On October 4, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-88779 to their Known Exploited Vulnerabilities (KEV) Catalog. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779 Understanding and Addressing CVE-2026-88779 in Citrix NetScaler ADC and Citrix NetScaler Gateway CISA KEV: CVE-2026-88779