Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

Reported by watchTowr Labs (Sina Kheirkhah (@SinSinology))

Summary by Cyber Security News29 Sep 2026, 15:55 CEST

About this summary. This is a short, independently written summary of an article first published by watchTowr Labs. Cyber Security News did not report or verify the underlying story. Read the original: https://labs.watchtowr.com/here-we-go-again-citrix-netscaler-dtls-preauth-memory-overflow-cve-2026-88772/

Part 1 of this week's saga can be found here. This research is a glimpse into the capabilities that power our Preemptive Exposure Management solution, enabling organizations to rapidly react to emerging threats: the watchTowr Platform. What Is A Citrix NetScaler?NetScaler, from Citrix (now under Cloud Software Group), is an application delivery controller - some believe it qualifies to be described as a security appliance.

Read the full article at watchTowr Labs →

Related coverage

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

NCSC-2026-0394 [1.00] [H/H] Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

Citrix Patches Actively Exploited NetScaler ADC & NetScaler Gateway Vulnerabilities

Citrix security advisory (AV26-965)

U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog