CVE-2026-8451
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
Insufficient input validation in NetScaler ADC and NetScaler Gateway leads to memory overread when the device is configured as a SAML IDP.
Risk Assessment
An attacker could exploit this vulnerability to read sensitive data from memory, potentially leading to information disclosure or further attack escalation within the organization's network.
Recommendation
Immediately update NetScaler ADC and NetScaler Gateway to the latest patched version and temporarily disable the SAML IDP feature if not essential.
Other vulnerabilities in NetScaler ADC
See all- CVE-2026-8655Critical
Multiple memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway can lead to unpredictable or erroneous behavior and Denial of Service (DoS). The vulnerability occurs when NetScaler ADC is configured as an Oracle load balancer, DNS proxy, or DNS recursive resolver.
- CVE-2026-13474High
The vulnerability allows a DoS attack via malformed HTTP/2 requests to NetScaler ADC and NetScaler Gateway. It occurs when HTTP/2 is enabled in the HTTP profile and associated with a virtual server (LB, CS, VPN) or a service configured on the device.
Original NVD description (English source)
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP