CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploited in the wild High 8.8 Published 30 Jun 2026 Updated 27 Aug 2026

Attackers can cause denial of service via memory overflow in NetScaler ADC and Gateway when configured as a Gateway or AAA virtual server.

Exploited in the wild: Since 26 Aug 2026
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-8452?

CVE-2026-8452 is a high-severity memory corruption vulnerability in NetScaler ADC, published on 30 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

Weakness: CWE-119

Which versions are affected by CVE-2026-8452?

It affects 2 products.

Products include Citrix NetScaler ADC, Citrix Netscaler Gateway.

How do I fix CVE-2026-8452?

No fix has been published for CVE-2026-8452 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 29 Aug 2026.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2026-8452 being exploited?

Yes. Attackers have exploited CVE-2026-8452 in the wild since at least 26 Aug 2026.

Public exploit code: 5 proofs of concept on GitHub.

Sources

Also known as GHSA-r7wg-r5wj-c765.