CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service.
Other sources
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8452?
The severity of CVE-2026-8452 is rated at 52, indicating a medium risk of exploitation.
What products are affected by CVE-2026-8452?
CVE-2026-8452 affects Citrix NetScaler ADC and Citrix NetScaler Gateway.
How does CVE-2026-8452 impact affected systems?
CVE-2026-8452 can lead to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway or AAA virtual server.
How do I fix CVE-2026-8452?
To fix CVE-2026-8452, ensure that you apply the latest security patches provided by Citrix.
When was CVE-2026-8452 published?
CVE-2026-8452 was published on June 30, 2026.