CVE-2026-8451: Insufficient input validation leading to memory overread
Published Jun 30, 2026
·Updated
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP
Affected Software
9 affected components
Citrix NetScaler ADC
Citrix NetScaler Gateway
Citrix NetScaler Application Delivery Controller<13.1-37.272
Citrix NetScaler Application Delivery Controller<13.1-37.272
Citrix NetScaler Application Delivery Controller>=13.1<13.1-63.18
Citrix NetScaler Application Delivery Controller>=14.1<14.1-72.61
Citrix NetScaler Application Delivery Controller=14.1-66.68
Citrix NetScaler Gateway>=13.1<13.1-63.18
Citrix NetScaler Gateway>=14.1<14.1-72.61
Event History
Jun 30, 2026
CVE Published
via MITRE·12:33 PM
Data Sourced
via MITRE·12:33 PM
DescriptionWeakness
Data Sourced
via NVD·01:19 PM
DescriptionSeverityWeaknessAffected Software
Jul 6, 2026
News Published
via Dark Reading·09:17 PM
News Published
via Dark Reading·09:29 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-8451?
The severity of CVE-2026-8451 is rated at 45, indicating a moderate risk level.
2
What products are affected by CVE-2026-8451?
CVE-2026-8451 affects Citrix NetScaler ADC and Citrix NetScaler Gateway when configured as a SAML IDP.
3
How do I fix CVE-2026-8451?
To fix CVE-2026-8451, ensure to apply the latest patches and updates provided by Citrix for the affected software.
4
What type of vulnerability is CVE-2026-8451 classified as?
CVE-2026-8451 is classified as an input validation vulnerability that leads to memory overread.
5
What could be the consequence of exploiting CVE-2026-8451?
Exploiting CVE-2026-8451 could potentially allow attackers to read sensitive data from memory.