High CVSS 7.5
CVE-2026-8451
Citrix Netscaler Application Delivery Controller
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP
What this means
- Exposure
- Exploitable remotely over the network, without authentication and with no action from the victim.
- Impact
- An attacker can read sensitive data.
- Weakness
- An out-of-bounds read exposes adjacent memory, often leftover secrets.
- Likelihood
- Its EPSS score makes exploitation likely within the next thirty days.
What to doPatch without waiting for the next scheduled cycle. Start with the instances exposed to the internet.
Read automatically from the CVSS vector, the weakness type (CWE) and the EPSS score. The technical description above remains the one published by NIST.