Security Advisory for NetScaler ADC and Gateway Denial of Service (DoS) Vulnerability (CVE-2026-88779)

The primary remediation is to upgrade to the fixed firmware versions provided by the vendor.

1. Version Verification

Access the NetScaler CLI and run the following command to check the current version:

show version

2. Fixed Versions

• NetScaler ADC and Gateway 14.1-73.41 or later
• NetScaler ADC and Gateway 13.1-64.28 or later
• NetScaler ADC 13.1-37.282 FIPS or later

3. Temporary Mitigation

If immediate patching is not possible, restrict access to management interfaces and monitor for anomalous traffic patterns that may indicate exploitation attempts.

CVE-2026-88779 is a memory corruption vulnerability (CWE-119) in NetScaler ADC and Gateway. It allows an unauthenticated remote attacker to trigger improper memory buffer operations by sending malicious network requests. This leads to a crash of the appliance, resulting in a complete Denial of Service (DoS). The vulnerability is currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog and maintains a high EPSS score of 0.94, indicating active exploitation in the wild and a high probability of further attacks.