citrix — news and analysis

NVD detail for CVE-2026-8451 showing a Citrix NetScaler memory-overread flaw

CitrixBleed is back: a NetScaler flaw that leaks memory — and with it, the session tokens that unlock your network

CVE-2026-8451 makes NetScaler ADC and Gateway over-read memory when configured as a SAML identity provider, potentially spilling session tokens. It's the same class of bug behind the original CitrixBleed. Patch it.

Priya Nair · 2d ago · 9 min