CVE WatchJul 1, 2026

CVE-2026-8452

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if th

CVSS

9.8

Critical

EPSS

0.5%

p39

KEV

—

Exploit Today

0-100

Published: Jun 30, 2026 · Last modified: Jul 1, 2026 · CWE-119

EPSS · 30d

0.4%EPSS · 30 days0.5%

2026-07-012026-07-17

Technical description

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

Official references

support.citrix.comhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-312778.8 HIG

71.0%

KEV—71Apple Multiple Products Buffer Overflow Vulnerability3d CVE-2005-445910.0 NO

96.2%

——29Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.11d CVE-2011-40454.3 NO

88.5%

——27Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to cause a denial of service via a crafted HTML document.9d CVE-2025-434338.8 HIG

62.4%

——19The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.3d CVE-2025-432146.5 MED

57.6%

——17The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.3d CVE-2025-434414.3 MED

55.9%

——17The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.3d