Citrix NetScaler ADC and NetScaler Gateway Vulnerability Under Investigation
- Severity
- HIGH
- Affected component
- citrix_netscaler_adc (other)
- Patched version
- Not yet available
An improper restriction of operations within the bounds of a memory buffer vulnerability in Citrix NetScaler ADC and NetScaler Gateway is under investigation. This vulnerability could lead to denial of service.
What happened
Citrix NetScaler ADC and NetScaler Gateway contain a vulnerability tracked as CVE-2026-8452. This vulnerability involves an improper restriction of operations within the bounds of a memory buffer which could lead to denial of service. The vulnerability appears to be exploited in the wild. The affected components are citrix_netscaler_adc and netscaler_gateway. No authoritative version range has been published yet.
The Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities Catalog. CISA is urging government agencies to immediately patch the vulnerability. Citrix has announced patches on June 30 for versions 14.1-72.61 (FIPS), 13.1-63.18 and 13.1-37.272. However, these patches are not authoritatively linked to CVE-2026-8452 in the provided data.
What to do about it
- Monitor for official patches from Citrix and apply them as soon as they are available.
- Consult the primary sources for updates on the vulnerability and any available patches.
- No official fix has been published yet for the affected components. Monitor the sources below for updates.
How 0Day would have caught this
citrix_netscaler_adc is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
You may be affected if you are using citrix_netscaler_adc or netscaler_gateway. No authoritative version range has been published yet.
What should I do right now?
Monitor for official patches from Citrix and apply them as soon as they are available. Consult the primary sources for updates on the vulnerability and any available patches.
Has this been exploited in the wild?
Yes, the vulnerability appears to be exploited in the wild.