{
  "crds_version": "0.1",
  "kind": "base",
  "id": "crds:cve-2026-8452",
  "revision": 1,
  "title": "Citrix NetScaler — Memory Overflow in Gateway and Authentication Servers",
  "summary": "A memory overflow in Citrix NetScaler appliances set up as a gateway (virtual private network, remote desktop or application proxy) or as an authentication virtual server. An unauthenticated attacker on the network can crash the appliance or push it into erratic behaviour.",
  "source_type": "cve",
  "severity": "critical",
  "cvss": {
    "score": 9.8,
    "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "version": "3.1"
  },
  "epss": 0.01606,
  "exploitation": {
    "known_exploited": true,
    "exploit_available": false,
    "attack_complexity": "low",
    "kev_added": "2026-08-26",
    "prerequisites": "Network access to a NetScaler appliance configured as a gateway or authentication virtual server"
  },
  "mitre_attack": [
    "T1499"
  ],
  "kill_chain": "impact",
  "recommended_action": "Apply Citrix's mitigations for advisory CTX696604 on every NetScaler gateway or authentication virtual server, and restrict who can reach them until that is done.",
  "confidence": "medium",
  "provenance": [
    {
      "fields": [
        "cvss",
        "exploitation.attack_complexity",
        "exploitation.exploit_available",
        "references",
        "published_at"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2026-8452",
      "retrieved_at": "2026-09-21T07:05:11.841Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "exploitation.known_exploited",
        "exploitation.kev_added"
      ],
      "source": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "retrieved_at": "2026-09-21T07:05:11.841Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "epss"
      ],
      "source": "https://api.first.org/data/v1/epss?cve=CVE-2026-8452",
      "retrieved_at": "2026-09-21T07:05:11.841Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "title",
        "summary",
        "severity",
        "remediation",
        "mitre_attack",
        "kill_chain",
        "recommended_action",
        "confidence",
        "tags",
        "exploitation.prerequisites"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2026-8452",
      "retrieved_at": "2026-09-21T07:05:11.841Z",
      "confidence": "high",
      "extractor": "claude-code"
    }
  ],
  "references": [
    {
      "type": "cve",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8452",
      "label": "NVD record"
    },
    {
      "type": "cisa",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "label": "CISA Known Exploited Vulnerabilities catalog"
    },
    {
      "type": "vendor_advisory",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604"
    }
  ],
  "published_at": "2026-06-30T13:19:33.450Z",
  "issued_at": "2026-09-21T07:05:11.841Z",
  "tags": [
    "citrix",
    "netscaler",
    "memory-corruption",
    "denial-of-service"
  ]
}