Critical severity9.8CISA KEVNVD Advisory· Published Jun 30, 2026· Updated Aug 27, 2026
CVE-2026-8452
CVE-2026-8452
Description
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*+ 3 more
- cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*range: <13.1-37.272
- cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*range: >=13.1,<13.1-63.18
- cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*range: <13.1-37.272
- cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*
- cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*Range: >=13.1,<13.1-63.18
Patches
Vulnerability mechanics
References
2- support.citrix.com/support-home/kbsearch/articlenvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
12- Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilitiesTenable Blog · Sep 27, 2026
- Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploitedHelp Net Security · Aug 30, 2026
- CISA Warns of Citrix NetScaler ADC and Gateway Vulnerability Exploited in AttacksCyber Security News · Aug 27, 2026
- CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix ProductsInfosecurity Magazine · Aug 27, 2026
- Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452)Help Net Security · Aug 27, 2026
- CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server BugsThe Hacker News · Aug 27, 2026
- Recent Citrix NetScaler Vulnerability Exploited in the WildSecurityWeek · Aug 27, 2026
- Citrix CVE-2026-8452 Zero-Day Added to CISA KEV Under Active ExploitationVypr Intelligence · Aug 26, 2026
- ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and MoreThe Hacker News · Aug 17, 2026
- Citrix NetScaler Heap Overflow Flaw Lets Remote Attackers Execute Code as Root – PoC ReleasedCyber Security News · Aug 14, 2026
- You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))watchTowr Labs · Aug 14, 2026
- CISA Adds Six Known Exploited Vulnerabilities to CatalogCISA Alerts