Skip to content
Connect AISign inSign up free
CVE-2026-84518.8High

CVE-2026-8451: NetScaler ADC vulnerability

NetScaler · ADC

Vendor fix available · Affected: NetScaler ADC · Exploitation: public proof of concept (unverified)

ExploitationProof of concept public

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

  1. In CISA KEV: not seen
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public4 public GitHub repositories (unverified), listed by PoC-in-GitHub30 Jun
  5. Not established: not seen
14.2%probability of exploitation in the next 30 days
96th percentile
050100

Higher than 96% of scored CVEs

8.8HighCVSS 4.0
LowHigh

DescriptionNVD

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
CISA KEV
Not listed
Public check
No public nuclei template
Weakness
Out-of-bounds Read · Memory Corruption
Vendor
NetScaler
Published
June 2026
Band
Likely to be exploited (10% or more), June 2026

What changed

  1. FIRST’s EPSS score rose from 0.5% to 14%, past 1% FIRST
  2. FIRST’s EPSS score rose from 0.5% to 14%, past 10% FIRST
  3. PoC-in-GitHub lists 4 public GitHub repositories (unverified) PoC-in-GitHub

Coverage5 articles · 3 outlets

One row per outlet, in order of first report. First in our coverage: SecurityWeek, 1 Jul.

Full timeline
Quiet for 12 weekslast report 27 Aug5 articles3 outlets
1 Jul · SecurityWeek first10 Sep4 OctNow
  • Wed 1 Jul, 11:51 UTC. SecurityWeek, first report. Citrix fixes critical NetScaler flaws after HTTP/2 Bomb alert.
  • Thu 2 Jul, 15:21 UTC. SecurityWeek. Citrix NetScaler flaw CVE-2026-8451 exploited within hours.
  • Thu 2 Jul, 17:51 UTC. SecurityOnline, its first report on the story. Citrix NetScaler CVE-2026-8451 exploited, patch now urged.
  • Mon 6 Jul, 21:41 UTC. Dark Reading, its first report on the story. CitrixBleed-ing Again? NetScaler Vulnerability Under Attack.
  • Thu 27 Aug, 04:50 UTC. SecurityWeek. Recent Citrix NetScaler Vulnerability Exploited in the Wild.
All coveragerunning total5SecurityWeek3SecurityOnl…1Dark Reading12 Jul17 Aug2 OctNow
  • First report
  • Article
  • Running total
Show as table
5 articles about CVE-2026-8451 from 3 outlets
Published (UTC)OutletHeadline
1 Jul 11:51SecurityWeekCitrix fixes critical NetScaler flaws after HTTP/2 Bomb alert
2 Jul 15:21SecurityWeekCitrix NetScaler flaw CVE-2026-8451 exploited within hours
2 Jul 17:51SecurityOnlineCitrix NetScaler CVE-2026-8451 exploited, patch now urged
6 Jul 21:41Dark ReadingCitrixBleed-ing Again? NetScaler Vulnerability Under Attack
27 Aug 04:50SecurityWeekRecent Citrix NetScaler Vulnerability Exploited in the Wild
  1. Recent Citrix NetScaler Vulnerability Exploited in the Wild
    SecurityWeek · mentions it in passing
  2. CitrixBleed-ing Again? NetScaler Vulnerability Under Attack
    Dark Reading
  3. Citrix NetScaler CVE-2026-8451 exploited, patch now urged
    SecurityOnline
  4. Citrix NetScaler flaw CVE-2026-8451 exploited within hours
    SecurityWeek
  5. Citrix fixes critical NetScaler flaws after HTTP/2 Bomb alert
    SecurityWeek · first in our coverage

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Sign inSign up free

Updated