A vulnerability has been found in Citrix NetScaler ADC and NetScaler Gateway classified as problematic. The affected element is an unknown function of the component Virtual Server Page. Performing a manipulation results in denial of service. This vulnerability was named CVE-2026-8452. The attack may be initiated remotely.
| Vendor | Product | Versions |
|---|---|---|
| citrix | netscaler_application_delivery_controller | 14.1, 13.1, 14.1 FIPS, 13.1 FIPS and NDcPP, 14.1, 13.1 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| citrix | netscaler | cert_advisory | 90% |
| citrix | netscaler_gateway | cve_cpe | 95% |
Updated description with new technical details, changed severity to HIGH, estimated CVSS score to 7.5, and noted that the exploit is not available but the vulnerability is actively exploited.
Initial creation
