Active Exploitation of CitrixBleed Vulnerability in NetScaler Appliances Following Public Disclosure

A newly disclosed vulnerability named CitrixBleed (CVE-2026-8451) is being actively exploited by threat actors targeting NetScaler appliances immediately after its public disclosure. Attackers are leveraging publicly available proof-of-concept (PoC) code to extract arbitrary memory content via HTTP responses. The flaw affects Citrix NetScaler systems, though specific versions or deployment environments are not detailed. No exact exploitation timeline or geographic targeting is provided, but the attacks commenced following the vulnerability’s public release. The impact includes unauthorized memory access, though further technical consequences are not specified.