CISA Warns of Active Exploitation of Citrix NetScaler Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a high-severity memory overflow vulnerability, CVE-2026-88779, in Citrix NetScaler ADC and Gateway. This flaw, affecting deployments configured as SAML Service or Identity Providers, is currently under active exploitation. CISA has added it to its Known Exploited Vulnerabilities Catalog, mandating federal agencies to patch by October 7, 2026, to prevent potential denial of service attacks that disrupt authentication and remote access.