CVE-2026-8452: Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
Published Jun 30, 2026
·Updated
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
Affected Software
9 affected components
Citrix NetScaler ADC
Citrix NetScaler Gateway
Citrix NetScaler Application Delivery Controller<13.1-37.272
Citrix NetScaler Application Delivery Controller<13.1-37.272
Citrix NetScaler Application Delivery Controller>=13.1<13.1-63.18
Citrix NetScaler Application Delivery Controller>=14.1<14.1-72.61
Citrix NetScaler Application Delivery Controller=14.1-66.68
Citrix NetScaler Gateway>=13.1<13.1-63.18
Citrix NetScaler Gateway>=14.1<14.1-72.61
Event History
Jun 30, 2026
CVE Published
via MITRE·12:41 PM
Data Sourced
via MITRE·12:41 PM
Description
Data Sourced
via NVD·01:19 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-8452?
The severity of CVE-2026-8452 is rated at 52, indicating a medium risk of exploitation.
2
What products are affected by CVE-2026-8452?
CVE-2026-8452 affects Citrix NetScaler ADC and Citrix NetScaler Gateway.
3
How does CVE-2026-8452 impact affected systems?
CVE-2026-8452 can lead to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway or AAA virtual server.
4
How do I fix CVE-2026-8452?
To fix CVE-2026-8452, ensure that you apply the latest security patches provided by Citrix.
5
When was CVE-2026-8452 published?
CVE-2026-8452 was published on June 30, 2026.