Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

Ravie LakshmananJul 01, 2026Vulnerability / Enterprise Security

Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to facilitate arbitrary file reads or trigger a denial-of-service (DoS) condition.

The vulnerabilities are listed below –

• CVE-2026-8451 (CVSS score: 8.8) – An insufficient input validation vulnerability leading to memory overread when NetScaler ADC or NetScaler Gateway is configured as a SAML IDP
• CVE-2026-8452 (CVSS score: 8.8) – A memory overflow vulnerability leading to unpredictable or erroneous behavior and denial-of-service when the appliance is configured as a Gateway or an AAA virtual server
• CVE-2026-8655 (CVSS score: 8.8) – Multiple memory overflow vulnerabilities leading to unpredictable or erroneous behavior and denial-of-service when NetScaler ADC is configured as an LB of type Oracle, a DNS Proxy,…