Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to facilitate arbitrary file reads or trigger a denial-of-service (DoS) condition. The vulnerabilities are listed below - CVE-2026-8451 (CVSS score: 8.8) - An insufficient input validation

The article reports that Citrix released security updates for six vulnerabilities in NetScaler ADC and NetScaler Gateway that enable arbitrary file reads and denial-of-service (DoS) attacks, including high-severity insufficient input validation flaws similar to past issues like CVE-2026-3055 that allow out-of-bounds memory reads and potential data exposure.[1][4] These bugs affect customer-managed, on-prem NetScaler instances and follow a pattern of recurring critical NetScaler vulnerabilities that have required emergency patching and active exploitation monitoring by governments and enterprises.[1][2][3] From a CyberSE.AI perspective, repeated high-impact flaws in widely deployed network appliances increase AI supply chain risk because these devices often front-end or connect to AI services and data stores, making them attractive pivots for attackers to exfiltrate model-related data, credentials, or training corpora. Organizations should treat NetScaler and similar infrastructure as critical AI-adjacent components in their SBOM and threat models, enforce rapid patch SLAs, and include these gateways in continuous AI red teaming to test how compromise of perimeter appliances could c