CVE-2026-8452

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

Affected products

Netscaler Adc, Netscaler Gateway

Citrix Netscaler Application Delivery Controller

< 13.1-37.272, 13.1-63.18, 14.1-72.61, 14.1-66.68

Citrix Netscaler Gateway

< 13.1-63.18, 14.1-72.61

CVSS 3.1

9.8 CRITICAL

EPSS

0.5% (40th percentile)

Weakness

CWE-119

NVD status

Analyzed

Published

2026-06-30