By Kevin Poireault
Publication Date: 2026-08-27 10:45:00
The US Cybersecurity and Infrastructure Security Agency (CISA) added six new flaws to its Known Exploited Vulnerabilities (KEV) catalog in a single day on August 26, urging government agencies and critical infrastructure organizations to patch them quickly.
CISA KEV listing means the US agency has found evidence of exploitation in the wild.
The August 26 list included two high-severity security vulnerabilities.
The first, tracked as CVE-2026-8452, is a memory overflow vulnerability in NetScaler ADC and NetScaler Gateway.
It was reported by Citrix at the end of June and attributed a severity rating (CVSS) of 8.8.
Exploiting the flaw can lead to unpredictable or erroneous behavior and denial of service (DoS) if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
Citrix has provided a patch in the following updates:
- NetScaler ADC and NetScaler Gateway 14.1-72.61 and later releases
- NetScaler ADC and…