Gateway vulnerabilities

8 known vulnerabilities in Gateway from Citrix NetScaler. 8 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ADC: Predictable Exact Value from Previous Values

  CVE-2026-88778Sep 27, 2026Citrix NetScaler

  Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-7

• 9.8 Critical severity

  ADC: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-88777Sep 27, 2026Citrix NetScaler

  Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before

• 9.8 Critical severity

  ADC: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-88776Sep 27, 2026Citrix NetScaler

  Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before

• 9.8 Critical severity

  ADC: Buffer Copy without Checking Size of Input

  CVE-2026-88775Sep 27, 2026Citrix NetScaler

  Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 le

• 7.2 High severity

  Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

  CVE-2026-88774Sep 27, 2026Citrix NetScaler

  Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a featu

• 10.0 Critical severity

  ADC: Inconsistent Interpretation of HTTP Requests

  CVE-2026-88773Sep 27, 2026Citrix NetScalerEPSS 3.08%

  Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 an

• 8.1 High severity

  Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Exploited

  CVE-2026-88772Sep 27, 2026Citrix NetScalerEPSS 76.6%

  Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote

• 9.8 Critical severity

  Citrix NetScaler Improper Input Validation Exploited

  CVE-2026-88771Sep 27, 2026Citrix NetScalerEPSS 81.9%

  Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.