Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 4 Oct 2026.
11%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-88779. Nothing runs until you send it.
Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.
You are affected if
The fix