Citrix NetScaler Vulnerabilities Enable DoS and Memory Disclosure Attacks

Citrix disclosed six high-severity vulnerabilities in NetScaler ADC and Gateway appliances, including CVE-2026-8451, which allows unauthenticated memory disclosure when configured as a SAML identity provider. Other vulnerabilities can lead to denial-of-service (DoS) attacks, arbitrary file access, and memory overreads. The vulnerabilities were published on June 30, 2026, with a proof-of-concept exploit for CVE-2026-8451 released on July 1, 2026. So far, there are no confirmed reports of exploitation. Affected systems include those configured for single sign-on and DNS proxy setups. Administrators are urged to apply security updates to mitigate risks.

Key Points: • Citrix disclosed six high-severity vulnerabilities in NetScaler products. • CVE-2026-8451 allows unauthenticated memory disclosure via SAML IDP configuration. • Proof-of-concept exploit for CVE-2026-8451 was released shortly after disclosure.