Back to the CVE list
CVE-2026-88779 CISA KEV · Actively exploitedSuited to automated attack · CISA

Memory overflow vulnerability leading to Denial of Service

CVSS score

8.7

EPSS probability

%0.6

Risk score

0.1

Published

15 d ago

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

Rapid719.10.2026

Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

OverviewIn early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments.The intrusion achieved root code execution, deployed multiple persistence mechanisms, installed PHP web shells, created outbound command-and-control and internal tunnelling capabilities, performed targeted reconnaissance of DNS, LDAP/Active Directory, management services and VMware vCenter infrastructure, and exfiltrated NetScaler configuration

SecurityWeek09.10.2026

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service. The post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability appeared first on SecurityWeek.

TheCyberThrone08.10.2026

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

A new critical vulnerability in SonicWall SMA1000 appliances deserves immediate attention from organizations using the platform as an internet-facing remote-access gateway. Tracked as CVE-2026-102255, the vulnerability is a pre-authentication Server-Side…

TheCyberThrone07.10.2026

CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

Executive Summary Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting multiple Atlassian Data Center products. The vulnerability carries a CVSS v4.0 score of 9.3 (Critical) and can…

TheCyberThrone05.10.2026

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

A new Citrix NetScaler zero-day has moved quickly from discovery to active exploitation. CVE-2026-88779 affects NetScaler ADC and NetScaler Gateway deployments using SAML authentication and can cause the appliance to…

Rapid728.09.2026

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

OverviewOn September 27, 2026, Citrix disclosed eight new vulnerabilities affecting NetScaler ADC and NetScaler Gateway, including two critical remote code execution (RCE) vulnerabilities: CVE-2026-88771 and CVE-2026-88772. Both of these RCE vulnerabilities carry a critical CVSSv4 score of 9.5, and both have been confirmed as being actively exploited in the wild as zero-days prior to the vendor disclosure. CVE-2026-88771 affects vulnerable NetScaler deployments in their default configuration, with no additional product features required. The vendor has also indicated that the attack complexity

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-88779"