CVSS 4.0
8.8 highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:L/SI:L/SA:LCVE-2026-8452
High (8.8) in Citrix NetScaler ADC and NetScaler Gateway. In CISA KEV since 2026-08-26. EPSS 1.0% chance of exploitation in the next 30 days.
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2026-08-26, due 2026-08-29
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- citrix:netscaler_application_delivery_controller
- citrix:netscaler_gateway