The vulnerability, tracked as CVE-2026-88772, carries a CVSS score of 9.5. It is a memory overflow bug in the handling of the Datagram Transport Layer Security (DTLS) protocol, with the root cause residing within NetScaler itself. Exploitation details released by researchers describe a pre-authentication path that can lead to shellcode execution, meaning an attacker may be able to trigger the flaw and run code without first logging in.

Key points to note:

• Affected products: Citrix NetScaler ADC and NetScaler Gateway
• Vulnerability type: memory overflow in DTLS protocol handling
• Attack vector: pre-authentication, potentially leading to shellcode execution
• Status: patched, but actively exploited in the wild

Given the pre-auth nature of the flaw, organizations running exposed NetScaler ADC or Gateway instances should treat this as high priority and confirm they are running a patched version.

Source: The Hacker News

Has your organization already applied the patch, or are you still assessing exposure on internet-facing NetScaler appliances?