Previously Patched Citrix NetScaler Flaw (CVE-2026-8452) Actively Exploited in the Wild

The US Cybersecurity and Infrastructure Security Agency (CISA) has added a previously patched memory overflow vulnerability in Citrix NetScaler ADC and Gateway, tracked as CVE-2026-8452, to its Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation. The flaw, initially described by Citrix as leading to denial of service, was later found by researchers to be chainable into unauthenticated remote code execution.