PT-2026-53879 · Citrix · Netscaler Gateway+1

Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-8451

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions NetScaler ADC (affected versions not specified) NetScaler Gateway (affected versions not specified)

Description Insufficient input validation occurs when NetScaler ADC or NetScaler Gateway is configured as a SAML IDP (Security Assertion Markup Language Identity Provider), which is a system that authenticates users and issues security tokens. This flaw can lead to a memory overread, a condition where the system reads data beyond the intended buffer boundary, potentially exposing sensitive information from the system memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-8451

Affected Products

Netscaler Adc

Netscaler Gateway

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-8451 · Security Note
• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604 · Note
• https://twitter.com/jantytgat/status/2071932739729702963 · Twitter Post
• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604&articleTitle=CTX696604_NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_8451_CVE_2026_8452_CVE_2026_8655_CVE_2026_10816_CVE_2026_10817_and_CVE_2026_13474 · Reddit Post