Vulnerability intelligence
CVE-2026-8451
NetScaler ADC
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP
CVSS Score
8.8
High
EPSS — Exploit Probability
0.5%
Riskier than 41% of all CVEs · checked 2026-09-29
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
5 articles across 3 outlets · first covered Jul 1, 2026 · latest Aug 27, 2026
Coverage timeline
-
Recent Citrix NetScaler Vulnerability Exploited in the Wildwww.securityweek.com · Aug 27, 2026
-
CitrixBleed-ing Again? NetScaler Vulnerability Under Attackwww.darkreading.com · Jul 6, 2026
-
Citrix NetScaler CVE-2026-8451 exploited, patch now urgedsecurityonline.info · Jul 2, 2026
-
Citrix NetScaler flaw CVE-2026-8451 exploited within hourswww.securityweek.com · Jul 2, 2026
-
Citrix fixes critical NetScaler flaws after HTTP/2 Bomb alertwww.securityweek.com · Jul 1, 2026