HIGHVulnerability
Verified
Global

CISA KEV: Citrix NetScaler ADC and NetScaler Gateway — Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service.

Analysis

Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service. Added to CISA Known Exploited Vulnerabilities catalog on 2026-08-26. Remediation due: 2026-08-29.

Indicators of Compromise (1)

CVE (1)
CVE-2026-8452
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Aug 26, 2026. Verified by: CISA.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-108971 — A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd...

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may be performed from remote. The exploit has been published and may be used.

CVE-2026-108971
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-89111 — The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting mul...

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.

CVE-2026-89111
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-89110 — SAP NetWeaver Visual Composer does not perform sufficient authorization checks i...

SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise of the remote system. This results in a high impact on confidentiality, integrity and availability.

CVE-2026-89110
NIST NVD