Description
Citrix NetScaler ADC 和 NetScaler Gateway 是 Citrix 推出的应用交付控制器和安全远程接入网关产品，常用于企业应用负载均衡、SSL 卸载、身份认证、VPN 远程访问和边界访问控制等场景，广泛部署于大型企业和组织的公网入口。Citrix-NetScaler /saml/login 接口存在信息泄露漏洞，攻击者可在未授权情况下获取进程内存相关敏感信息。
Citrix-NetScaler /saml/login 信息泄露漏洞（CVE-2026-8451）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604
https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/
https://www.cve.org/CVERecord?id=CVE-2026-8451
https://www.crowdsec.net/vulntracking-report/cve-2026-8451-citrix-netscaler-saml-memory-overread
https://cyberscoop.com/citrix-netscaler-flaw-cve-2026-8451-citrixbleed/
https://www.lupovis.io/lupovis-insights/
https://www.securityweek.com/new-citrixbleed-vulnerability-exploited-immediately-after-public-disclosure/
https://digital.nhs.uk/cyber-alerts/2026/cc-4805
https://beazley.security/alerts-advisories/multiple-high-severity-vulnerabilities-in-citrix-netscaler-adc-and-netscaler-gateway-cve-2026-8451
https://www.triskelelabs.com/resources/citrix-netscaler-pre-auth-memory-overread-cve-2026-8451