HighCVECVE-2026-88779
[CVE-2026-88779] Citrix NetScaler — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
The Hacker News·Source published ·1 min read·Video available
Advisory videoOpen on YouTube ↗
What happened?
Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779, carries a CVSS score of 8.7 out of 10.0. "CVE-2026-88779 is a memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway that can lead to
Key details
- Linux Kernel ebtables SNAT target contains an out-of-bounds write vulnerability.
- ARP sender hardware address rewrite can write into a nonlinear socket-buffer fragment.
- The affected socket-buffer fragment is backed by a splice-imported file page.
- The impacted product may be end-of-life or end-of-service.
- Users should discontinue use or transition to a supported version.
- Forensic triage is required per BOD 26-04.
Affected
- Linux Kernel ebtables SNAT target component.
Fixes and mitigations
- Apply mitigations per vendor instructions and BOD 26-04 guidance.
- Discontinue use if mitigations are unavailable.
Summarised by SecOraLens from CISA KEV. Always read the original source before acting. How SecOraLens verifies advisories.