{"cve":{"cve_id":"CVE-2026-8451","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.15654,"epss_percentile":0.96657,"epss_as_of":"2026-08-28","description":"Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP","published_at":"2026-06-30T12:33:08.999000Z","last_modified_at":"2026-07-01T15:52:58.800000Z","cvss_v3_score":7.5,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_v3_severity":"HIGH","cvss_v4_score":8.8,"cvss_v4_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N","cvss_v4_severity":"HIGH","ssvc_decision":null,"ssvc_exploitation":"none","ssvc_automatable":true,"ssvc_technical_impact":"total","cwes":["CWE-125"],"nvd_references":["https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604"],"vuln_status":"Analyzed","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-30T13:46:12.619389Z","updated_at":"2026-07-02T07:33:52.206779Z"},"effective_severity":"HIGH","badges":["news"],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":"4.0","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"AT","name":"Attack Requirements","value":"N","value_label":"None"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"VC","name":"Confidentiality (Vulnerable System)","value":"H","value_label":"High"},{"metric":"VI","name":"Integrity (Vulnerable System)","value":"L","value_label":"Low"},{"metric":"VA","name":"Availability (Vulnerable System)","value":"H","value_label":"High"},{"metric":"SC","name":"Confidentiality (Subsequent System)","value":"N","value_label":"None"},{"metric":"SI","name":"Integrity (Subsequent System)","value":"N","value_label":"None"},{"metric":"SA","name":"Availability (Subsequent System)","value":"N","value_label":"None"}]},"affected":[{"vendor_slug":"citrix","vendor_name":"Citrix","product_slug":"netscaler-application-delivery-controller","product_name":"netscaler_application_delivery_controller","version_start":"14.1-66.68","version_start_inclusive":true,"version_end":"14.1-66.68","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*"},{"vendor_slug":"citrix","vendor_name":"Citrix","product_slug":"netscaler-application-delivery-controller","product_name":"netscaler_application_delivery_controller","version_start":null,"version_start_inclusive":null,"version_end":"13.1-37.272","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*"},{"vendor_slug":"citrix","vendor_name":"Citrix","product_slug":"netscaler-application-delivery-controller","product_name":"netscaler_application_delivery_controller","version_start":null,"version_start_inclusive":null,"version_end":"13.1-37.272","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*"},{"vendor_slug":"citrix","vendor_name":"Citrix","product_slug":"netscaler-application-delivery-controller","product_name":"netscaler_application_delivery_controller","version_start":"13.1","version_start_inclusive":true,"version_end":"13.1-63.18","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*"},{"vendor_slug":"citrix","vendor_name":"Citrix","product_slug":"netscaler-gateway","product_name":"NetScaler Gateway","version_start":"13.1","version_start_inclusive":true,"version_end":"13.1-63.18","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"adc","product_name":"ADC","version_start":"14.1","version_start_inclusive":true,"version_end":"72.61","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:adc:14.1:72.61"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"adc","product_name":"ADC","version_start":"13.1","version_start_inclusive":true,"version_end":"63.18","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:adc:13.1:63.18"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"adc","product_name":"ADC","version_start":"14.1 FIPs","version_start_inclusive":true,"version_end":"72.61","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:adc:14.1 FIPs:72.61"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"adc","product_name":"ADC","version_start":"13.1 FIPS and NDcPP","version_start_inclusive":true,"version_end":"37.272","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:adc:13.1 FIPS and NDcPP:37.272"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"gateway","product_name":"Gateway","version_start":"13.1","version_start_inclusive":true,"version_end":"63.18","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:gateway:13.1:63.18"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"gateway","product_name":"Gateway","version_start":"14.1","version_start_inclusive":true,"version_end":"72.61","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:gateway:14.1:72.61"}],"exploit_refs":[],"news":[{"id":259,"source":"The Hacker News","url":"https://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.html","title":"Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service","summary":"Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to facilitate arbitrary file reads or trigger a denial-of-service (DoS) condition.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-8451 (CVSS score: 8.8) - An insufficient input validation","thumbnail_url":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkaU5jHNUkuBuH0Obx-gU_L4wSKOWP9bPwZeyD8tY1hIHShQozXYO2UckRTb2z5SwreXgHxLzePWkBfixNzYWsJ6eXioRllicv96TA8QvXBerGAguD3uA2T1DcMaURdi5BdMcNlY4DF_DPk-kdNXvIZfz8QMnrekgc-Hjksqf5OCHy11j0zcT668GgBhnc/s1600/citrix.jpg","author":"info@thehackernews.com (The Hacker News)","published_at":"2026-07-01T03:54:22Z","fetched_at":"2026-07-01T04:49:42.275812Z","trending_score":1.3192810189634724e-9,"cve_ids":["CVE-2026-8451"]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2026-06-30T12:33:08.999000Z","label":"CVE published","source":null},{"type":"ssvc_changed","at":"2026-06-30T14:46:12.619459Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-30T14:46:12.619459Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-30T14:46:12.619459Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"first_article","at":"2026-07-01T03:54:22Z","label":"First news coverage","source":"The Hacker News"},{"type":"cvss_changed","at":"2026-07-02T07:33:52.206779Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-07-02T07:33:52.206779Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-07-02T07:33:52.206779Z","label":"CVSS score revised","source":"nvd"}]}