Vulnerability intelligence

CVE-2026-8451

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

CVSS Score

8.8

High

EPSS — Exploit Probability

16%

Riskier than 97% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

4 articles across 3 outlets · first covered Jul 1, 2026 · latest Jul 6, 2026

Tracked incidents

vulnerability closed 5 articles

Citrix NetScaler CVE-2026-8451 exploited in the wild

Coverage timeline

CitrixBleed-ing Again? NetScaler Vulnerability Under Attack
www.darkreading.com · Jul 6, 2026
Citrix NetScaler CVE-2026-8451 exploited, patch now urged
securityonline.info · Jul 2, 2026
Citrix NetScaler flaw CVE-2026-8451 exploited within hours
www.securityweek.com · Jul 2, 2026
Citrix fixes critical NetScaler flaws after HTTP/2 Bomb alert
www.securityweek.com · Jul 1, 2026