CVE-2026-8452: citrix netscaler_application_delivery_controller, citrix netscaler_gateway

CVSS 9.8 (critical) · listed as exploited by CISA since 2026-08-26 · published 2026-06-30

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

Affected products (NVD): citrix netscaler_application_delivery_controller, citrix netscaler_gateway

Fixed in (NVD): 13.1-37.272, 13.1-63.18, 14.1-72.61

Weakness: CWE-119

Source: NVD CVE-2026-8452

References

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-8452

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.