Exploit for netscaler-saml-memory-disclosure-security-assessment

kitploit · 2026-08-24

Description

Memory overread in Citrix NetScaler SAML (CitrixBleed) enables information disclosure.

Affected software

Citrix Netscaler Application Delivery Controller< 13.1-37.272, 13.1-63.18, 14.1-72.61, 14.1-66.68

Citrix Netscaler Gateway< 13.1-63.18, 14.1-72.61

CVSS 8.8 for CVE-2026-8451

8.8

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:L/SI:N/VA:H/SA:N

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

EPSS Score

15.7%higher than 96.6% of all CVEs

Updated 2026-08-28

Exploit Details

Modified:2026-08-24 11:58

Last Seen:2026-08-26 10:42

Reporter:KitPloit

Tags

Citrix NetScalerSAML memory overreadinformation disclosureCitrixBleedCVE-2026-8451

Other exploits for CVE-2026-8451

watchTowr-vs-Netscaler-CVE-2026-8451

2026-08-28 KitPloitKITPLOIT

Netscaler-CVE-2026-8451

2026-08-27 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

2026-07-07 aymanmahmoudoffsec-creatorGITHUB

2026-06-30 NetScalerUNKNOWN

Exploit Code

MARKDOWN11 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-AMNSECURITY-NETSCALER-SAML-MEMORY-DISCLOSURE-SECURITY-ASSESSMENT
# CVE-2026-8451 - Overread della memoria SAML di Citrix NetScaler (CitrixBleed)

**Report di cybersicurezza in stile consulenziale**  
Report professionale di valutazione delle vulnerabilità per il rischio di divulgazione della memoria SAML di NetScaler, comprensivo di impatto tecnico, rimedio e strategia di mitigazione.

![Report Type](https://img.shields.io/badge/Report-Vulnerability%20Assessment%20Report-blue?style=for-the-badge) ![Sanitized](https://img.shields.io/badge/Status-Sanitized%20Public%20Report-brightgreen?style=for-the-badge) ![OWASP WSTG](https://img.shields.io/badge/Methodology-OWASP%20WSTG-2ea44f?style=for-the-badge) ![Focus Area](https://img.shields.io/badge/Focus-Network%20Edge%20Security-informational?style=for-the-badge)

* * *

## 📍 Riepilogo del Report