Naravel
Subscribe

Narratives Security

CVE-2026-88779 Exploited Against Citrix NetScaler SAML Deployments

Zero TrustCitrix NetScaler

Built from 3 signals across 3 sources · 74 items reviewed

CVE-2026-88779 is being exploited in targeted attacks against affected customer-managed Citrix NetScaler ADC and NetScaler Gateway deployments, where it can cause denial of service. Citrix rates the memory overflow flaw 8.7 CVSS and has released security updates; CISA added it to the Known Exploited Vulnerabilities catalog on October 4, 2026.

  • The flaw affects NetScaler ADC and NetScaler Gateway when specific deployment preconditions are met and can take SAML-enabled deployments offline through denial of service.
  • CVE-2026-88779 is a memory overflow vulnerability with a CVSS score of 8.7 out of 10.0.
  • Citrix disclosed targeted zero-day exploitation and released security updates for affected supported customer-managed versions.
  • CISA added CVE-2026-88779 to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation.

Bottom line If you run customer-managed NetScaler ADC or Gateway, apply Citrix’s security updates now and verify whether SAML services are exposed to disruption.

Signals3