CVE-2026-8452

Citrix · Published June 30, 2026

9.8

CVSS v3.1

CRITICAL

CISA KEV — Federal agencies must patch by deadline

Actively exploited in the wild

Patch availableGet patch

Description

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

Affected Products

Netscaler Application Delivery Controller < 13.1-37.272
Netscaler Application Delivery Controller < 13.1-63.18
Netscaler Application Delivery Controller < 14.1-72.61
Netscaler Application Delivery Controller

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H