project

Citrix NetScaler Gateway

Remote-access and authentication gateway appliance; the SAML-enabled Gateway virtual server is the exposed attack surface in this flaw.

Current clusters

security1 distinct publisher

Config audit decides whether the new NetScaler patches are an emergency

Citrix shipped fixes on 19 August 2026 for a memory overflow and an authentication bypass in NetScaler ADC and Gateway, but each one needs particular features turned on, so the inventory has to come before the change window.

Publishers:thecyberexpress.com

Reality

Evidence48
Adoption: Insufficient
Hype gap+12
Incentives35

build1 distinct publisher

One unauthenticated SAML request reaches root on NetScaler before signature verification runs

The overflow in CVE-2026-8452 sits in PrefixList canonicalization, which NetScaler performs before it validates the SAML signature, so an attacker needs no trust with your IdP and only a reachable virtual server with SAML turned on.

Publishers:dev.to

Reality

Evidence56
Adoption63