CVE-2026-8451

Insufficient input validation leading to memory overread

High · published June 30, 2026

CVSS v4.0
8.8
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N
EPSS
0.00502 · 42.1th percentile
Published
2026-06-30T12:33Z
EPSS history
Timeline
  • 25 SEP 03:28Z
    EPSS moved 16% → 1%
    epss
  • 30 JUN 12:33Z
    Insufficient input validation leading to memory overread
    cvelistv5