CVE-2026-88778Vulnerability

1. “Appliances already updated for the earlier CVE-2026-88771 through CVE-2026-88778 issues may still require this newer update.”

   SOCRadarVendor6 Oct 2026
   CVE-2026-88779: Citrix NetScaler Zero-Day

2. “CVE-2026-88778”

   watchTowr LabsVendor29 Sep 2026
   Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

3. “…ity Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778”

   Palo Alto Unit 42Vendor28 Sep 2026
   Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild

4. “…ity Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778”

   Canadian Centre for Cyber SecurityGovernment28 Sep 2026
   Citrix security advisory (AV26-965)

5. “CVE-2026-88778”

   Rapid7Vendor28 Sep 2026
   Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

6. “Citrix released patches for vulnerabilities numbered CVE-2026-88771 through CVE-2026-88778 on Sunday, and confirmed that “exploits of CVE-2026-88771 and CVE-2026-88772 on unmitigated NetScaler deployments have been observed.””

   Help Net SecurityNews28 Sep 2026
   Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)

7. “CVE-2026-88778: a TCP Initial Sequence Number (ISN) prediction flaw with a (CVSS 8.8)”

   Infosecurity MagazineNews28 Sep 2026
   Citrix Patches Critical Zero Days Under Active Exploitation

8. “CVE-2026-88778”

   SOCRadarVendor28 Sep 2026
   Citrix NetScaler Zero-Days FAQ: CVE-2026-88771 & 88772

9. “Para corregir CVE-2026-88778 también se debe habilitar la función Enhanced ISN Generation, siguiendo las instrucciones facilitadas por Citrix.”

   INCIBE-CERTGovernment28 Sep 2026
   Múltiples vulnerabilidades en productos de Citrix

10. “The remaining six vulnerabilities (CVE-2026-88773 through CVE-2026-88778) have been assigned CVSS scores ranging from 7.0 to 9.3.”

    Sophos X-OpsVendor28 Sep 2026
    Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation

11. “Référence CVE CVE-2026-88778”

    CERT-FRGovernment28 Sep 2026
    Multiples vulnérabilités dans Citrix NetScaler ADC et Gateway (28 septembre 2026)

12. “De kwetsbaarheid met kenmerk CVE-2026-88778 heeft een CVSS-score van 8,8 en betreft voorspelbaarheid van TCP Initial Sequence Numbers (ISN).”

    NCSC-NL advisoriesGovernment27 Sep 2026
    NCSC-2026-0394 [1.00] [H/H] Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway

13. “…ateway products: CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778.”

    CISA advisoriesGovernment27 Sep 2026
    Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

• hxxps://support.citrix[.]com/support-home/kbsearch/article?articleNumber=CTX697096&articleURL=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778in 1 report
• hxxps://community.citrix[.]com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778/#Indicators_of_Compromise__cabcb4in 1 report

Also named with it: CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, CVE-2026-88779