Exploit for CVE-2026-8451

cve · 2026-06-30

Description

Insufficient input validation causes memory overread when Netscaler is a SAML identity provider.

Affected software

Citrix Netscaler Application Delivery Controller< 13.1-37.272, 13.1-63.18, 14.1-72.61, 14.1-66.68

Citrix Netscaler Gateway< 13.1-63.18, 14.1-72.61

CVSS 8.8 for CVE-2026-8451

8.8

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:L/SI:N/VA:H/SA:N

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

EPSS Score

15.7%higher than 96.6% of all CVEs

Updated 2026-08-27

CVE Information

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604

Exploit Details

Modified:2026-07-01 15:52

Last Seen:2026-08-24 08:39

Reporter:NetScaler

Tags

memory overreadinput validationnetscalernetscaler gatewaysaml identity provider

Other exploits for CVE-2026-8451

2026-08-26 KitPloitKITPLOIT

Netscaler-CVE-2026-8451

2026-08-26 KitPloitKITPLOIT

watchTowr-vs-Netscaler-CVE-2026-8451

2026-08-26 KitPloitKITPLOIT

netscaler-saml-memory-disclosure-security-assessment

2026-08-24 KitPloitKITPLOIT

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

2026-07-07 aymanmahmoudoffsec-creatorGITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-8451
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP