NetSight
high7.5

CVE-2026-8451

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML I…

Impact

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

Affected products

VendorProductAffected versions
CitrixNetscaler Application Delivery Controller
before 13.1-37.272
from 13.1 before 13.1-63.18
from 14.1 before 14.1-72.61
Version 14.1-66.68
CitrixNetscaler Gateway
from 13.1 before 13.1-63.18
from 14.1 before 14.1-72.61

Weakness classification

References