CVE-2026-8452

Netscaler Application Delivery Controller
90/100
exploitation likelihood
CVSS8.8
EPSS1.0%
VulnCheck KEVEXPLOITED
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
Listed in VulnCheck KEV (confirmed exploited in the wild) · CVSS base 8.8
Public PoC / Exploit3

Defensive review only — these references demonstrate exploitability.

githubwatchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452 (★58)githubBishopFox/CVE-2026-8452-check (★1)vulncheck-xdbVulnCheck XDB c9e400c6 (initial-access)
References1
NVD detailVendor advisorysupport.citrix.com
Mentions 1