Citrix NetScaler: Interim Mitigations for CVE-2026-88779 Before Patching

CVE-2026-88779 in Citrix NetScaler is an out-of-bounds write (CWE-119) rated 8.7 under CVSS v4 that can cause denial of service, with Citrix reporting targeted attacks. Fixed builds are 14.1-73.41, 13.1-64.28, 14.1-73.41 FIPS and 13.1-37.282. Until patching, Citrix recommends Global Deny List signatures, firewall blocking and removing unused SAML configurations.

• CVE-2026-88779 is an out-of-bounds write (CWE-119) rated 8.7 under CVSS v4
• Fixes ship only in builds 14.1-73.41, 13.1-64.28, 14.1-73.41 FIPS and 13.1-37.282
• Citrix offers Global Deny List signatures via NetScaler Console as a stopgap
• The vulnerable path requires SAML on a Gateway or AAA virtual server