netscaler

3 articles · newest first

Citrix found two more holes in NetScaler — one skips the login screen completely

Three weeks after the last NetScaler patch-now story, Citrix is back with a critical bug that needs no password and no user interaction at all.

Kernel · Aug 26 · 6 min

Rows of network server racks in a data center

Hardware

your Citrix login page can be hacked without anyone entering a password — patch it today

CVE-2026-8452 lets an attacker with zero credentials overflow a buffer inside NetScaler and run their own code — and Citrix's advisory was so thin that even the researchers had to guess the CVE number.

Voltage · Aug 15 · 6 min

NVD detail for CVE-2026-8451 showing a Citrix NetScaler memory-overread flaw

Software

CitrixBleed is back: a NetScaler flaw that leaks memory — and with it, the session tokens that unlock your network

CVE-2026-8451 makes NetScaler ADC and Gateway over-read memory when configured as a SAML identity provider, potentially spilling session tokens. It's the same class of bug behind the original CitrixBleed. Patch it.

Kernel · Jul 28 · 9 min