CVE-2026-8452
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. Deadline for federal agencies: 2026-08-29.
10 articles across 6 outlets · first covered Jul 1, 2026 · latest Aug 28, 2026
Coverage timeline
-
CISA adds critical Red Hat, SQL Server, Citrix flaws to KEV list.securityaffairs.com · Aug 28, 2026
-
CISA adds KEV flaws, flags Citrix NetScaler and SQL Server bugs.www.infosecurity-magazine.com · Aug 27, 2026
-
uBlock Origin v1.74.0 Chrome release to be delisted amid CVEssecurityonline.info · Aug 27, 2026
-
WeedHack malware steals data from over 116,000 Minecraft gamerssecurityonline.info · Aug 27, 2026
-
Recent Citrix NetScaler Vulnerability Exploited in the Wildwww.securityweek.com · Aug 27, 2026
-
CISA warns of active exploits in NetScaler, SQL Server, Linuxsecurityonline.info · Aug 27, 2026
-
CISA Adds Citrix NetScaler Flaw CVE-2026-8452 to Exploit Listwww.cisa.gov · Aug 27, 2026
-
CISA flags Citrix NetScaler flaw CVE‑2026‑8452 actively exploitedcisa.gov · Aug 26, 2026
-
watchTowr publishes exploit for Citrix NetScaler RCE CVE-2026-8452securityonline.info · Aug 17, 2026
-
Citrix fixes critical NetScaler flaws after HTTP/2 Bomb alertwww.securityweek.com · Jul 1, 2026