Skip to content
Sign in
CVE-2026-84528.8High

CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix · NetScaler ADC and NetScaler Gateway

Vendor fix available · Affected: Citrix NetScaler ADC and NetScaler Gateway · Exploitation: in CISA KEV since 26 Aug

ExploitationIn CISA KEV

  1. In CISA KEVCISA KEV catalogue26 Aug
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public5 public GitHub repositories (unverified), listed by PoC-in-GitHub20 Jul 2023
  5. Not established: not seen
1.0%probability of exploitation in the next 30 days
63rd percentile
050100

Higher than 63% of scored CVEs

8.8HighCVSS 4.0
LowHigh

Federal deadline

CISA KEV · added 26 Aug · catalogue entry

Passed 75 days ago

DescriptionNVD

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

What changed

  1. CISA added it to the KEV catalogue CISA
  2. PoC-in-GitHub lists 5 public GitHub repositories (unverified) PoC-in-GitHub

CISA required action

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Coverage10 articles · 5 outlets

One row per outlet, in order of first report; the chart covers the last 90 days. First in our coverage: SecurityWeek, 1 Jul.

Full timeline
Quiet for 6 weekslast report 5 Oct10 articles5 outlets
1 Jul · SecurityWeek first7 Sep30 Sep23 OctNow
  • Wed 1 Jul, 11:51 UTC. SecurityWeek, first report. Citrix fixes critical NetScaler flaws after HTTP/2 Bomb alert. Cites a CVE in CISA KEV.
  • Mon 17 Aug, 05:01 UTC. SecurityOnline, its first report on the story. watchTowr publishes exploit for Citrix NetScaler RCE CVE-2026-8452. Cites a CVE in CISA KEV.
  • Wed 26 Aug, 22:56 UTC. CISA, its first report on the story. CISA flags Citrix NetScaler flaw CVE‑2026‑8452 actively exploited. Cites a CVE in CISA KEV.
  • Thu 27 Aug, 02:52 UTC. CISA. CISA Adds Citrix NetScaler Flaw CVE-2026-8452 to Exploit List. Cites a CVE in CISA KEV.
  • Thu 27 Aug, 03:47 UTC. SecurityOnline. CISA warns of active exploits in NetScaler, SQL Server, Linux. Cites a CVE in CISA KEV.
  • Thu 27 Aug, 04:50 UTC. SecurityWeek. Recent Citrix NetScaler Vulnerability Exploited in the Wild. Cites a CVE in CISA KEV.
  • Thu 27 Aug, 09:30 UTC. SecurityOnline. WeedHack malware steals data from over 116,000 Minecraft gamers. Cites a CVE in CISA KEV.
  • Thu 27 Aug, 11:11 UTC. Infosecurity, its first report on the story. CISA adds KEV flaws, flags Citrix NetScaler and SQL Server bugs.. Cites a CVE in CISA KEV.
  • Fri 28 Aug, 09:40 UTC. Security Affairs, its first report on the story. CISA adds critical Red Hat, SQL Server, Citrix flaws to KEV list.. Cites a CVE in CISA KEV.
  • Mon 5 Oct, 13:53 UTC. Infosecurity. Citrix warns attackers are exploiting a NetScaler zero day. Cites a CVE in CISA KEV.
All coveragerunning totalAdded to CISA KEV · 26 Aug9SecurityOnl…3CISA2SecurityWeek1Infosecurity2Security Af…117 Aug16 Sep16 OctNow
  • First report
  • Article
  • Official notice
  • Running total

Added to CISA KEV

Show as table
9 articles about CVE-2026-8452 from 5 outlets
Published (UTC)OutletHeadline
17 Aug 05:01SecurityOnlinewatchTowr publishes exploit for Citrix NetScaler RCE CVE-2026-8452
26 Aug 22:56CISACISA flags Citrix NetScaler flaw CVE‑2026‑8452 actively exploited
27 Aug 02:52CISACISA Adds Citrix NetScaler Flaw CVE-2026-8452 to Exploit List
27 Aug 03:47SecurityOnlineCISA warns of active exploits in NetScaler, SQL Server, Linux
27 Aug 04:50SecurityWeekRecent Citrix NetScaler Vulnerability Exploited in the Wild
27 Aug 09:30SecurityOnlineWeedHack malware steals data from over 116,000 Minecraft gamers
27 Aug 11:11InfosecurityCISA adds KEV flaws, flags Citrix NetScaler and SQL Server bugs.
28 Aug 09:40Security AffairsCISA adds critical Red Hat, SQL Server, Citrix flaws to KEV list.
5 Oct 13:53InfosecurityCitrix warns attackers are exploiting a NetScaler zero day
  1. Citrix warns attackers are exploiting a NetScaler zero day
    Infosecurity · mentions it in passing
  2. CISA adds critical Red Hat, SQL Server, Citrix flaws to KEV list.
    Security Affairs · mentions it in passing
  3. CISA adds KEV flaws, flags Citrix NetScaler and SQL Server bugs.
    Infosecurity
  4. WeedHack malware steals data from over 116,000 Minecraft gamers
    SecurityOnline · mentions it in passing
  5. Recent Citrix NetScaler Vulnerability Exploited in the Wild
    SecurityWeek
  6. CISA warns of active exploits in NetScaler, SQL Server, Linux
    SecurityOnline
  7. CISA Adds Citrix NetScaler Flaw CVE-2026-8452 to Exploit List
    CISA · official notice
  8. CISA flags Citrix NetScaler flaw CVE‑2026‑8452 actively exploited
    CISA · official notice
Show 2 more

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in