VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 30, 2026· Updated Jul 1, 2026

CVE-2026-8451

CVE-2026-8451

Description

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

Affected products

7
  • Citrix Systems/Netscaler Application Delivery Controller4 versions
    cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*+ 3 more
    • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*range: >=13.1,<13.1-63.18
    • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*range: <13.1-37.272
    • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*range: <13.1-37.272
    • cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*
  • Citrix Systems/Access Gateway
    cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*
    Range: >=13.1,<13.1-63.18
  • Netscaler/NetScaler Gatewayllm-fuzzy
  • Netscaler/NetScaler ADCllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

2