Citrix products: multiple vulnerabilities | 07/03
The HKCERT advisory confirms that CVE-2026-8451, CVE-2026-8452 have been exploited in the wild; check the impact against your products and deployment conditions. Advisory updated: 2026-08-27.
Basis: the official source labels this high risk. GDMME follow-up priority uses official ratings and headline/summary rules. It is not a CVSS score or official vulnerability rating, and does not confirm that your business is affected.
Source severity
高度風險（HKCERT）
Affected scope
Scope listed in the advisory: NetScaler ADC and NetScaler Gateway 14.1 versions earlier than 14.1-72.61; NetScaler ADC and NetScaler Gateway 13.1 versions earlier than 13.1-63.18; NetScaler ADC FIPS versions earlier than 14.1-72.61 FIPS; NetScaler ADC FIPS and NDcPP versions earlier than 13.1-37.272. Conditions affecting exposure to CVE-2026-8451 include a SAML IDP configuration.
Official recommendations
The official source is linked here; its recommendation text has not been extracted.
GDMME recommended actions
GDMME automatic recommendations are not yet available for this entry. Check the official advisory and ask the responsible team to assess your environment.
Educational information only. Confirm affected versions, mitigations and exploitation status with the original vendor advisory. Reports do not imply that GDMME equipment blocks every vulnerability.