CVE-2026-8451

8.8

High

Published:30 Jun 2026

Last updated:1 Jul 2026

Source:50a63c94-1ea7-4568-8c11-eb79e7c5a2b5

Analyzed

Weakness (CWE)

CWE-125Out-of-bounds Read

CVSS Vector

v4.0

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: None
User Interaction: None
Confidentiality (Vulnerable): High
Integrity (Vulnerable): Low
Availability (Vulnerable): High
Confidentiality (Subsequent): None
Integrity (Subsequent): None
Availability (Subsequent): None

View on MITRE Find PoC on GitHub

Description

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

References

50a63c94-1ea7-4568-8c11-eb79e7c5a2b5

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604