CVE•Published 2026-06-30•Modified 2026-07-01•2 articles on news•6 live references•NVD data
CVE-2026-8451Citrix · Netscaler_application_delivery_controller
Vulnerability data via NVD (ingested)
CVSS v3.1
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS percentile
—
Weaknesses (CWE)
Description
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP
Timeline
Published 2026-06-30
Modified 2026-07-01
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
Shodan · vuln tag1,700 hosts
vuln:CVE-2026-8451Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · product
product:"Citrix Netscaler Application Delivery Controller"All exposed Citrix Netscaler Application Delivery Controller instances — cross-reference with the CVE's affected-version range.
Shodan · banner/body mention
http.html:"Netscaler Application Delivery Controller"HTTP body or banner mentions "Netscaler Application Delivery Controller" — catches deploys Shodan didn't identify as a product.
More intel sources (5)
Shodan report
vuln:CVE-2026-8451Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-8451Censys host search filtered to this CVE id.
grep.app
CVE-2026-8451Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-8451GitHub code search for direct mentions.
Google dork
"CVE-2026-8451" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2026-84518 repos
nomi-sec/PoC-in-GitHubunknown
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
Threekiii/Awesome-POCJava
一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.
Threekiii/CVEunknown
一个 CVE 漏洞预警知识库，无 exp/poc，部分包含修复方案。A knowledge base of CVE security vulnerability, no PoCs/exploits.
killvxk/gitweeklyPython
收集各种有趣的github项目
watchtowrlabs/watchTowr-vs-Netscaler-CVE-2026-8451Python
dick318/awesome-starsunknown
bodrick/awesome-starsunknown
amnsecurity/netscaler-saml-memory-disclosure-security-assessmentPython
Professional vulnerability assessment report for NetScaler SAML memory disclosure risk, including technical impact, remediation, and mitigation strategy.