Citrix Systems NetScaler ADC <14.1-73.37

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

by severity

5critical3high0medium0low

updated 2026-10-23

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-88772US	high8.1OT critical	1.30% (70th)	KEV	no fix	2026-09-27	—
CVE-2026-88771US	critical9.8OT critical	1.08% (65th)	KEV	no fix	2026-09-27	—
CVE-2026-88776US	critical9.8	0.38% (31st)	Exploit	no fix	2026-09-27	—
CVE-2026-88773US	critical10.0	0.36% (29th)	Exploit	no fix	2026-09-27	—
CVE-2026-88777US	critical9.8	0.38% (31st)	—	no fix	2026-09-27	—
CVE-2026-88775US	critical9.8	0.38% (31st)	—	no fix	2026-09-27	—
CVE-2026-88778US	high7.5	0.38% (31st)	—	no fix	2026-09-27	—
CVE-2026-88774US	high7.2	0.24% (14th)	—	no fix	2026-09-27	—

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-342Predictable Exact Value from Previous Values1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.