Citrix NetScaler: Critical SAML Memory Overflow Vulnerability CVE-2026-8452
CVE-2026-8452 is a critical memory overflow vulnerability residing in the SAML implementation of Citrix NetScaler ADC and Gateway. The flaw is triggered during the processing of SAML requests and assertions, where improper input buffer handling leads to memory corruption. This can result in a Denial of Service (DoS) or unpredictable system behavior. Due to the edge-facing nature of these appliances, the risk of unauthorized remote access or service disruption is significant. CISA has officially added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog following confirmed in-the-wild exploitation, mandating federal remediation by August 29, 2026. This flaw is part of a broader pattern of memory safety issues categorized by researchers as "CitrixBleed Infinity."