Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-8451

Insufficient input validation leading to memory overread

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NetScaler

Description

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetScaler ADC

Default version status: unaffected

  • 14.1 to < 72.61affected
  • 13.1 to < 63.18affected
  • 14.1 FIPs to < 72.61affected
  • 13.1 FIPS and NDcPP to < 37.272affected

NetScaler Gateway

Default version status: unaffected

  • 14.1 to < 72.61affected
  • 13.1 to < 63.18affected

References