Page generated: 11 Nov 2026, 03:45 UTC
← Dashboard

CVE-2026-8452

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

CVSS 8.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.3/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 8.8: +1.32
  • Fresh EPSS: 1.01%: +0.01

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 20 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

shattered.io
Press · 22 Sep 2026, 10:30 · CISA Adds 6 Exploited Flaws to KEV, Feds Get 3 Days [2026] - shattered.io
BleepingComputer
Press · 27 Aug 2026, 07:00 · CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday - BleepingComputer
Infosecurity Magazine
Press · 27 Aug 2026, 07:00 · CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products - Infosecurity Magazine
The Hacker News
Press · 27 Aug 2026, 07:00 · CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs - The Hacker News
Help Net Security
Press · 27 Aug 2026, 07:00 · Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452) - Help Net Security
See all 20 source documents
SecurityWeek
Press · 27 Aug 2026, 07:00 · Recent Citrix NetScaler Vulnerability Exploited in the Wild - SecurityWeek
Field Effect
Press · 20 Aug 2026, 07:00 · Citrix NetScaler flaw exploited following POC release - Field Effect
Arctic Wolf
Press · 18 Aug 2026, 07:00 · Citrix NetScaler ADC & Gateway Critical RCE Vulnerability CVE-2026-8452 - Arctic Wolf
The Hacker News
Press · 17 Aug 2026, 07:00 · ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More - The Hacker News
watchTowr Labs
Press · 14 Aug 2026, 07:08 · You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))
watchTowr Labs
Press · 14 Aug 2026, 07:08 · You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))
CyberSecurityNews
Press · 14 Aug 2026, 07:00 · Citrix NetScaler Heap Overflow Flaw Lets Remote Attackers Execute Code as Root - PoC Released - CyberSecurityNews
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 03 Jul 2026, 07:00 · Citrix Products Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre
The Hacker News
Press · 01 Jul 2026, 07:00 · Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service - The Hacker News
SOCRadar
Press · 01 Jul 2026, 07:00 · CVE-2026-8451 Adds a New NetScaler Memory Overread to the CitrixBleed Pattern - SOCRadar
Cyber Press
Press · 01 Jul 2026, 07:00 · Citrix NetScaler ADC and Gateway Flaws Expose Appliances to DoS and File Read Attacks - Cyber Press
SecurityWeek
Press · 01 Jul 2026, 07:00 · Citrix Patches NetScaler Vulnerabilities, Including New ‘HTTP/2 Bomb’ Attack - SecurityWeek
GBHackers News
Press · 01 Jul 2026, 07:00 · Citrix NetScaler ADC and Gateway Flaws Let Attackers Trigger Memory Overread and Denial-of-Service - GBHackers News
CCB Belgium
Press · 01 Jul 2026, 07:00 · Warning: Multiple High Vulnerabilities in Citrix Netscaler, Patch Immediately! - CCB Belgium
CyberSecurityNews
Press · 01 Jul 2026, 07:00 · Multiple Citrix NetScaler ADC and Gateway Vulnerabilities Enables DoS and Memory Overflow Attacks - CyberSecurityNews

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.3 (2026-11-02 15:14). The curve appears once the score changes.

Public exploit evidence

1

Public exploit entries / repo candidates

See 1 repos with metrics
RepositoryStarsForksLanguageUpdated
csrXamfi/CVE-2026-8452010C10 Oct 2026, 00:45
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 8.8; EPSS 1.0%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 14:00:28.370038+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
30 Jun 2026, 12:41
First press mention
01 Jul 2026, 07:00
Added to the CISA KEV catalog
26 Aug 2026, 00:00
Latest press mention
22 Sep 2026, 10:30
Score calculated
05 Nov 2026, 14:00
PoCs on GitHub
1 repositories