Citrix NetScaler Gateway
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-88778 | < 14.1-73.37 ; < 13.1-64.23 | TCP Initial Sequence Number (ISN) prediction | HIGH 8.8 | 0.7 % | ||
| CVE-2026-88777 | < 14.1-73.37 ; < 13.1-64.23 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service | HIGH 8.8 | 0.7 % | ||
| CVE-2026-88776 | < 14.1-73.37 ; < 13.1-64.23 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service | HIGH 8.8 | 0.7 % | ||
| CVE-2026-88775 | < 14.1-73.37 ; < 13.1-64.23 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service | HIGH 8.8 | 0.7 % | ||
| CVE-2026-88773 | < 14.1-73.37 FIPS ; < 13.1-64.23 | HTTP Request Smuggling | CRITICAL 9.3 | 3.4 % | ||
| CVE-2026-88774 | < 14.1-73.37 ; < 13.1-64.23 | Feature policy bypass due to improper HTTP URL based expression usage | HIGH 7.0 | 0.4 % | ||
| CVE-2026-88772 | < 14.1-73.37 ; < 13.1-64.23 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service | CRITICAL 9.5 | 78 % | KEV | |
| CVE-2026-88771 | < 14.1-73.37 ; < 13.1-64.23 | A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arb… | CRITICAL 9.5 | 82 % | KEV |