CVE-2026-8451: Insufficient input validation in NetScaler ADC and

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

• EPSS 15.7% (96.5% percentile)
• CVSS 8.8 high

Related briefings

• Critical Oracle, Kemp, and Linux flaws come under active attack 2026-07-06
• New Citrix NetScaler flaw leaks memory from VPN gateways 2026-06-30

Browse the CVE database

Read the full analysis on IntelFusions