{"vulnerability": "cve-2026-8451", "sightings": [{"uuid": "3c1d35b8-baf4-488b-b856-529b7efa401c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mruh4cqrf226", "content": "Citrix\u304cNetScaler\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3001\u65b0\u305f\u306a\u300cHTTP/2\u7206\u5f3e\u300d\u653b\u6483\u306b\u3082\u5bfe\u5fdc\n\nCVE-2026-8451\u3001CVE-2026-8452\u3001CVE-2026-8655\u3001\u304a\u3088\u3073CVE-2026-10816\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b4\u3064\u306e\u554f\u984c\u306f\u3001\u6df1\u523b\u5ea6\u306e\u9ad8\u3044\u5883\u754c\u5916\u8aad\u307f\u53d6\u308a\u3001\u30e1\u30e2\u30ea\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u3001\u304a\u3088\u3073\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u8aad\u307f\u53d6\u308a\u306e\u30d0\u30b0\u3067\u3059\u3002\n\nCVE-2026-10816\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b5\u3064\u76ee\u306e\u8106\u5f31\u6027\u306f\u3001\u4e2d\u7a0b\u5ea6\u306e\u6df1\u523b\u5ea6\u306e\u5883\u754c\u5916\u8aad\u307f\u53d6\u308a\u3067\u3042\u308a\u30016\u3064\u76ee\u306fApache HTTP\u30b5\u30fc\u30d0\u30fc\u3092\u6a19\u7684\u3068\u3057\u305f\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u653b\u6483\u3067\u3042\u308b HTTP/2 Bomb\u3067\u3059\u3002\n\nCVE-2026-49975\u3068\u3057\u3066\u8ffd\u8de1...", "creation_timestamp": "2026-07-30T12:32:45.038534Z"}, {"uuid": "4b4e67fb-c176-4881-853d-b2f47c8cb03f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/cyberok_news/236", "content": "\ud83d\udcbb \u0423\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Citrix NetScaler ADC / NetScaler Gateway\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8451 \u0432 Citrix NetScaler ADC \u0438 NetScaler Gateway \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 30.06.2026. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 900 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 Citrix Gateway. \u0418\u0437 \u043d\u0438\u0445 \u224884% \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-8451. \u0420\u0435\u0430\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u043d\u0438\u0436\u0435 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0430\u043c, \u0433\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043a\u0430\u043a SAML Identity Provider, \u0447\u0442\u043e \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83d\udd27 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0435\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 XML \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c \u043f\u0430\u0440\u0441\u0435\u0440\u043e\u043c NetScaler. \u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a SAML IdP, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a /saml/login \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0421\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432 cookie NSC_TASS \u0432 HTTP-\u043e\u0442\u0432\u0435\u0442\u0435.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438: \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0430\u0441\u0442\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: NetScaler ADC / NetScaler Gateway\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\u2022 NetScaler ADC / Gateway 14.1 \u043d\u0438\u0436\u0435 14.1-72.61\n\u2022 NetScaler ADC / Gateway 13.1 \u043d\u0438\u0436\u0435 13.1-63.18\n\u2022 NetScaler ADC FIPS 14.1 \u043d\u0438\u0436\u0435 14.1-72.61 FIPS\n\u2022 NetScaler ADC FIPS \u0438 NDcPP 13.1 \u043d\u0438\u0436\u0435 13.1-37.272\n\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \n\ud83d\udd3bCVSS 4.0: 8.8 \u2014 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \n\u0412\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438: \nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c SAMLRequest \u043a /saml/login \u2014 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0435, \u0434\u043b\u0438\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0451\u043d\u043d\u044b\u0435 Base64/XML-\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\u2022 \u041d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f/\u0440\u0430\u0437\u043c\u0435\u0440 cookie NSC_TASS \u0432 \u043e\u0442\u0432\u0435\u0442\u0430\u0445 NetScaler.\n\u2022 \u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 SAML/XML \u0432 \u043b\u043e\u0433\u0430\u0445 (ns.log).\n\u2022 \u0412\u0441\u043f\u043b\u0435\u0441\u043a 400/500 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 SAML.\n\u2022 \u0420\u0435\u0437\u043a\u0438\u0435 \u0440\u0435\u0441\u0442\u0430\u0440\u0442\u044b/\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 nsppe.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0439 SAML-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (\u043f\u0440\u0438\u0437\u043d\u0430\u043a \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0441\u0435\u0430\u043d\u0441\u0430).\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439: 14.1-72.61 / 13.1-63.18 (\u0438\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 FIPS/NDcPP-\u0441\u0431\u043e\u0440\u043e\u043a 14.1-72.61 FIPS / 13.1-37.272).\n2. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043b\u0438 SAML IdP \u2014 \u0435\u0441\u043b\u0438 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435.\n3. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a NetScaler (VPN, whitelist IP, FW).\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 SAML-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 30.06.2026.\n5. \u041f\u0440\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0441\u0441\u0438\u0438, \u0440\u043e\u0442\u0430\u0446\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u043e\u0432/\u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.\n6. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c\n\n\ud83d\udd17 \u0421\u0441\u044b\u043b\u043a\u0438\n\u2022 \u0420\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 watchTowr Labs\n\u2022 PoC", "creation_timestamp": "2026-08-04T13:00:18.992533Z"}, {"uuid": "97b73643-51aa-474c-b4ec-94bed83e3648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mryeoznulk2h", "content": "CitrixBleed\u306e\u65b0\u305f\u306a\u8106\u5f31\u6027\u304c\u3001\u516c\u8868\u76f4\u5f8c\u306b\u60aa\u7528\u3055\u308c\u308b\n\nCVE-2026-8451\uff08CVSS\u30b9\u30b3\u30a28.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001 Citrix\u304c\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f6\u670830\u65e5\u306b\u516c\u8868\u3055\u308c\u3001\u653b\u6483\u5bfe\u8c61\u9818\u57df\u7ba1\u7406\u4f1a\u793e\u306ewatchTower\u304c\u6280\u8853\u7684\u306a\u8a73\u7d30\u3092\u516c\u958b\u3057\u305f\u3002\n\n\u3053\u306e\u30d0\u30b0\u306f\u3001SAML IDP\u3068\u3057\u3066\u69cb\u6210\u3055\u308c\u305fNetScaler\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u5883\u754c\u5916\u8aad\u307f\u53d6\u308a\u306e\u554f\u984c\u3067\u3042\u308a\u3001\u30e1\u30e2\u30ea\u6f0f\u6d29\u306b\u3064\u306a\u304c\u308b\u3068\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n\u3053\u306e\u8106\u5f31\u6027\u306fNetScaler\u306eXML\u30d1\u30fc\u30b5\u30fc\u306b\u5b58\u5728\u3057\u3001\u5f15\u7528\u7b26\u3067\u56f2\u307e\u308c\u3066\u3044\u306a\u3044XML\u5c5e\u6027\u5024\u306e\u5f8c\u306b\u6539\u884c\u6587\u5b57\u304c\u7d9a\u304f\u5834\u5408\u3001\u305d\u306e\u5c5e\u6027\u5024\u3092\u7d42\u4e86\u51e6\u7406\u3057\u306a...", "creation_timestamp": "2026-08-01T02:00:11.621385Z"}, {"uuid": "195819de-cf0b-4aad-8e6f-b63b19dea364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/cyberok_news/236", "content": "\ud83d\udcbb \u0423\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Citrix NetScaler ADC / NetScaler Gateway\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8451 \u0432 Citrix NetScaler ADC \u0438 NetScaler Gateway \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 30.06.2026. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 900 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 Citrix Gateway. \u0418\u0437 \u043d\u0438\u0445 \u224884% \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-8451. \u0420\u0435\u0430\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u043d\u0438\u0436\u0435 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0430\u043c, \u0433\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043a\u0430\u043a SAML Identity Provider, \u0447\u0442\u043e \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83d\udd27 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0435\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 XML \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c \u043f\u0430\u0440\u0441\u0435\u0440\u043e\u043c NetScaler. \u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a SAML IdP, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a /saml/login \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0421\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432 cookie NSC_TASS \u0432 HTTP-\u043e\u0442\u0432\u0435\u0442\u0435.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438: \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0430\u0441\u0442\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: NetScaler ADC / NetScaler Gateway\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\u2022 NetScaler ADC / Gateway 14.1 \u043d\u0438\u0436\u0435 14.1-72.61\n\u2022 NetScaler ADC / Gateway 13.1 \u043d\u0438\u0436\u0435 13.1-63.18\n\u2022 NetScaler ADC FIPS 14.1 \u043d\u0438\u0436\u0435 14.1-72.61 FIPS\n\u2022 NetScaler ADC FIPS \u0438 NDcPP 13.1 \u043d\u0438\u0436\u0435 13.1-37.272\n\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \n\ud83d\udd3bCVSS 4.0: 8.8 \u2014 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \n\u0412\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438: \nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c SAMLRequest \u043a /saml/login \u2014 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0435, \u0434\u043b\u0438\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0451\u043d\u043d\u044b\u0435 Base64/XML-\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\u2022 \u041d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f/\u0440\u0430\u0437\u043c\u0435\u0440 cookie NSC_TASS \u0432 \u043e\u0442\u0432\u0435\u0442\u0430\u0445 NetScaler.\n\u2022 \u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 SAML/XML \u0432 \u043b\u043e\u0433\u0430\u0445 (ns.log).\n\u2022 \u0412\u0441\u043f\u043b\u0435\u0441\u043a 400/500 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 SAML.\n\u2022 \u0420\u0435\u0437\u043a\u0438\u0435 \u0440\u0435\u0441\u0442\u0430\u0440\u0442\u044b/\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 nsppe.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0439 SAML-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (\u043f\u0440\u0438\u0437\u043d\u0430\u043a \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0441\u0435\u0430\u043d\u0441\u0430).\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439: 14.1-72.61 / 13.1-63.18 (\u0438\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 FIPS/NDcPP-\u0441\u0431\u043e\u0440\u043e\u043a 14.1-72.61 FIPS / 13.1-37.272).\n2. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043b\u0438 SAML IdP \u2014 \u0435\u0441\u043b\u0438 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435.\n3. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a NetScaler (VPN, whitelist IP, FW).\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 SAML-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 30.06.2026.\n5. \u041f\u0440\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0441\u0441\u0438\u0438, \u0440\u043e\u0442\u0430\u0446\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u043e\u0432/\u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.\n6. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c\n\n\ud83d\udd17 \u0421\u0441\u044b\u043b\u043a\u0438\n\u2022 \u0420\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 watchTowr Labs\n\u2022 PoC", "creation_timestamp": "2026-08-05T00:00:35.615164Z"}, {"uuid": "e9f26f27-2858-4661-b26b-3841e1529142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/pphm_HackerNews/1736", "content": "\ud83d\udd34 Citrix Patches Critical NetScaler Flaw Resembling CitrixBleed\n\nAn urgent security update for Citrix NetScaler fixes 6 flaws, including a critical memory exposure vulnerability CVE-2026-8451 (CVSS score 8.8), a critical bug reminiscent of CitrixBleed. \n\nThe weakness affects systems defined as SAML IDP and allows attackers, without the need for authentication, to extract sensitive information from memory (such as tokens and active sessions) by sending malicious requests.\n\nFor security teams, this is a critical update that requires immediate action to prevent direct access to the corporate network and user sessions.", "creation_timestamp": "2026-08-21T23:00:10.767127Z"}, {"uuid": "f6120235-2385-4cbe-bc59-8e66c12fda72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "published-proof-of-concept", "source": "https://t.me/cyberok_news/236", "content": "\ud83d\udcbb \u0423\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Citrix NetScaler ADC / NetScaler Gateway\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8451 \u0432 Citrix NetScaler ADC \u0438 NetScaler Gateway \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 30.06.2026. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 900 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 Citrix Gateway. \u0418\u0437 \u043d\u0438\u0445 \u224884% \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-8451. \u0420\u0435\u0430\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u043d\u0438\u0436\u0435 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0430\u043c, \u0433\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043a\u0430\u043a SAML Identity Provider, \u0447\u0442\u043e \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83d\udd27 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0435\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 XML \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c \u043f\u0430\u0440\u0441\u0435\u0440\u043e\u043c NetScaler. \u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a SAML IdP, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a /saml/login \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0421\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432 cookie NSC_TASS \u0432 HTTP-\u043e\u0442\u0432\u0435\u0442\u0435.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438: \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0430\u0441\u0442\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: NetScaler ADC / NetScaler Gateway\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\u2022 NetScaler ADC / Gateway 14.1 \u043d\u0438\u0436\u0435 14.1-72.61\n\u2022 NetScaler ADC / Gateway 13.1 \u043d\u0438\u0436\u0435 13.1-63.18\n\u2022 NetScaler ADC FIPS 14.1 \u043d\u0438\u0436\u0435 14.1-72.61 FIPS\n\u2022 NetScaler ADC FIPS \u0438 NDcPP 13.1 \u043d\u0438\u0436\u0435 13.1-37.272\n\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \n\ud83d\udd3bCVSS 4.0: 8.8 \u2014 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \n\u0412\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438: \nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c SAMLRequest \u043a /saml/login \u2014 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0435, \u0434\u043b\u0438\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0451\u043d\u043d\u044b\u0435 Base64/XML-\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\u2022 \u041d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f/\u0440\u0430\u0437\u043c\u0435\u0440 cookie NSC_TASS \u0432 \u043e\u0442\u0432\u0435\u0442\u0430\u0445 NetScaler.\n\u2022 \u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 SAML/XML \u0432 \u043b\u043e\u0433\u0430\u0445 (ns.log).\n\u2022 \u0412\u0441\u043f\u043b\u0435\u0441\u043a 400/500 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 SAML.\n\u2022 \u0420\u0435\u0437\u043a\u0438\u0435 \u0440\u0435\u0441\u0442\u0430\u0440\u0442\u044b/\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 nsppe.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0439 SAML-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (\u043f\u0440\u0438\u0437\u043d\u0430\u043a \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0441\u0435\u0430\u043d\u0441\u0430).\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439: 14.1-72.61 / 13.1-63.18 (\u0438\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 FIPS/NDcPP-\u0441\u0431\u043e\u0440\u043e\u043a 14.1-72.61 FIPS / 13.1-37.272).\n2. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043b\u0438 SAML IdP \u2014 \u0435\u0441\u043b\u0438 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435.\n3. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a NetScaler (VPN, whitelist IP, FW).\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 SAML-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 30.06.2026.\n5. \u041f\u0440\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0441\u0441\u0438\u0438, \u0440\u043e\u0442\u0430\u0446\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u043e\u0432/\u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.\n6. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c\n\n\ud83d\udd17 \u0421\u0441\u044b\u043b\u043a\u0438\n\u2022 \u0420\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 watchTowr Labs\n\u2022 PoC", "creation_timestamp": "2026-08-06T00:00:58.909989Z"}, {"uuid": "e067171c-c6ea-4f4a-91c1-9e06a8fed839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtc3x7tirb2x", "content": "~Cybergcca~\nCanadian Cyber Centre digest: 7 advisories for IBM, Tenable, Dell, MS Edge, Citrix, Apple, SAP with multiple exploited CVEs.\n-\nIOCs: CVE-2026-8451, CVE-2026-8452, CVE-2026-65400\n-\n#PatchNow #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-17T16:15:27.064115Z"}, {"uuid": "76ac7b33-0282-421d-891f-96b2ba58a584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5lsqeey2j", "content": "CVE-2026-8451 - Insufficient input validation leading to memory overread\nCVE ID : CVE-2026-8451\n \n Published : June 30, 2026, 12:33 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Insufficient input validation in\u00a0NetScaler ADC and NetScaler Gateway\u00a0leading to memory overread if...", "creation_timestamp": "2026-06-30T13:52:42.957823Z"}, {"uuid": "6a68b149-b4a2-4893-8a72-e75d9ab07c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mpjr6j2ym72j", "content": "CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) - watchTowr Labs", "creation_timestamp": "2026-06-30T19:43:12.128125Z"}, {"uuid": "2e367701-1135-4afb-bc7a-116fa9a8afe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mpjrnbgy7a2r", "content": "What do we even say at this point?\n\nCVE-2026-8451, a zero-day Memory Overread that watchTowr Labs identified in Citrix NetScaler appliances in March, has just been publicly disclosed with patches.\n\nWe're not done yet\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2072042541352980515)", "creation_timestamp": "2026-06-30T19:51:27.264328Z"}, {"uuid": "33cd6266-f978-45d4-aa61-4cb13c86080c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mpjsnn4ovp2s", "content": "CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) - watchTowr Labs", "creation_timestamp": "2026-06-30T20:09:32.956326Z"}, {"uuid": "3a43db19-1110-4c9f-921e-c4b0013a9c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mpjsnncdgk2e", "content": "CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) - watchTowr Labs", "creation_timestamp": "2026-06-30T20:09:33.466618Z"}, {"uuid": "067e01ee-9a0e-41be-abbb-f2b01651f253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8451", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/116841148400596749", "content": "mum: what impact did you have on the cybersecurity industry?\nme: LOGOS\nif you have SAML IDP enabled on Netscaler, you want to patch CVE-2026-8451 https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451\nThis is already being exploited in the wild, one of my honeypots got MFA bypassed with it.", "creation_timestamp": "2026-06-30T21:20:51.840147Z"}, {"uuid": "badfca2a-6700-45e3-964b-52a6051fd9a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8451", "type": "seen", "source": "https://infosec.exchange/ap/users/116797276219291526/statuses/116840120493812466", "content": "Six NetScaler vulnerabilities allow denial of service, memory overreads, and an unauthenticated file read. Patch NetScaler ADC and Gateway now.\n#NetScaler #NetScalerADC #NetScalerGateway #Citrix #CVE20268451 #DenialOfService #Vulnerability\nhttps://securityonline.info/netscaler-vulnerabilities-cve-2026-8451/?utm_source=mastodon&utm_medium=jetpack_social", "creation_timestamp": "2026-06-30T21:36:58.566647Z"}, {"uuid": "e209c4db-51bf-4d34-94a4-fe87ee3dde5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway die verband houden met onvoldoende invoervalidatie, onjuiste toegangscontrole en het onjuist vrijgeven van geheugen. De kwetsbaarheden met de kenmerken CVE-2026-8451 en CVE-2026-10817 ontstaan door onvoldoende invoervalidatie, waarbij de software invoergroottes en -grenzen niet correct controleert. Dit kan leiden tot geheugenoverlezingen, wat kan resulteren in ongeautoriseerde openbaarmaking van gevoelige informatie, wanneer de producten zijn geconfigureerd als SAML IDP, of als TCP TimeStamp is ingeschakeld bij een TCP-profiel dat is gekoppeld aan een virtuele server van het type: Load Balancing (LB), Content Switching (CS) of VPN.\n\nDe kwetsbaarheden met de kenmerken CVE-2026-8452 en CVE-2026-8655 bevinden zich in de manier waarop geheugen wordt beheerd in NetScaler ADC en NetScaler Gateway. Dit kan leiden tot een denial-of-service (DoS) of een ongewenste control flow wanneer de producten zijn geconfigureerd als Gateway, DNS-proxy, recursieve DNS-resolver of AAA-virtuele server.\n\nDe kwetsbaarheid met het kenmerk CVE-2026-13474 ontstaat door het onjuist vrijgeven van geheugen. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken door via speciaal geprepareerde HTTP/2-verzoeken een denial-of-service (DoS) te veroorzaken.\n\nDe kwetsbaarheid met het kenmerk CVE-2026-10816 betreft een probleem met de toegangscontrole binnen de Management Interface. Niet-geauthenticeerde kwaadwillenden op afstand kunnen de kwetsbaarheid misbruiken om willekeurige bestanden uit te lezen. Dit kan resulteren in ongeautoriseerde openbaarmaking van gevoelige informatie.\n\nOnderzoekers hebben Proof-of-Concept (PoC) code gedeeld waarmee de kwetsbaarheid met kenmerk CVE-2026-8451 kan worden aangetoond.", "creation_timestamp": "2026-06-30T22:01:06.327740Z"}, {"uuid": "fcc36cf0-a047-47a8-a50e-caf3e101d37c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mpjz7uqlw72s", "content": "CVE-2026-8451\uff1aCitrix NetScaler\u306e\u8106\u5f31\u6027\u306b\u3088\u308b\u30e1\u30e2\u30ea\u6f0f\u6d29\n\neSecurity Planet \u306e\u30b3\u30f3\u30c6\u30f3\u30c4\u304a\u3088\u3073\u88fd\u54c1\u30ec\u30b3\u30e1\u30f3\u30c7\u30fc\u30b7\u30e7\u30f3\u306f\u3001\u7de8\u96c6\u4e0a\u306e\u72ec\u7acb\u6027\u3092\u4fdd\u3063\u3066\u3044\u307e\u3059\u3002\u30d1\u30fc\u30c8\u30ca\u30fc\u3078\u306e\u30ea\u30f3\u30af\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3053\u3068\u3067\u3001\u53ce\u76ca\u304c\u767a\u751f\u3059\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002 \u8a73\u7d30\u306f\u3053\u3061\u3089 watchTowr \u306e\u7814\u7a76\u8005\u305f\u3061\u304c\u3001Citrix NetScaler \u306b\u8106\u5f31\u6027\u3092\u767a\u898b\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a...", "creation_timestamp": "2026-06-30T22:07:07.149260Z"}, {"uuid": "9320b37b-c493-4708-aab1-71964000b22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpjzzjtqtl2o", "content": "CVE-2026-8451: Citrix's New Flaw Echoes CitrixBleed \u2014 Act Now #CVE20268451 #CitrixBleed #Cybersecurity", "creation_timestamp": "2026-06-30T22:21:34.576387Z"}, {"uuid": "4ae37d75-5d8c-4fad-b612-04bcbdc2d1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpjzzlru6a2m", "content": "CVE-2026-8451: Citrix's Security Patch Doesn't Solve Underlying Risks #CVE20268451 #Citrix #NetScaler", "creation_timestamp": "2026-06-30T22:21:46.601828Z"}, {"uuid": "6f020f3c-0f2b-46c2-abb5-be7f9b9a02dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpjzznrdeu24", "content": "CVE-2026-8451: Citrix's Security Narrative Raises Critical Privacy Concerns #CVE20268451 #Citrix #NetScaler", "creation_timestamp": "2026-06-30T22:21:50.124359Z"}, {"uuid": "cc42feed-c4e8-48e7-8fa3-06a714731f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpjzzpkqxe2o", "content": "CVE-2026-8451: Citrix's Latest NetScaler Flaw Echoes CitrixBleed's Process Failures #CVE20268451 #NetScaler #CitrixSecurity", "creation_timestamp": "2026-06-30T22:21:51.205203Z"}, {"uuid": "8ec0dc28-38db-4310-96c2-14e43e4c377a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpjzztwpqp2v", "content": "CVE-2026-8451: Citrix's New Patch Rehashes Warnings from CitrixBleed #CVE20268451 #Citrix #CyberSecurity", "creation_timestamp": "2026-06-30T22:21:53.570491Z"}, {"uuid": "689876b9-22c0-4c44-8108-4f205a907752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpk26m4nrw2k", "content": "CVE-2026-8451: Are Citrix's Patches Sufficient to Mitigate Risks? #CVE2026 #Citrix #NetScaler", "creation_timestamp": "2026-06-30T22:24:19.137728Z"}, {"uuid": "bd6a15c5-29bc-4bf5-9456-b2dc6b81ab88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway die verband houden met onvoldoende invoervalidatie, onjuiste toegangscontrole en het onjuist vrijgeven van geheugen. De kwetsbaarheden met de kenmerken CVE-2026-8451 en CVE-2026-10817 ontstaan door onvoldoende invoervalidatie, waarbij de software invoergroottes en -grenzen niet correct controleert. Dit kan leiden tot geheugenoverlezingen, wat kan resulteren in ongeautoriseerde openbaarmaking van gevoelige informatie, wanneer de producten zijn geconfigureerd als SAML IDP, of als TCP TimeStamp is ingeschakeld bij een TCP-profiel dat is gekoppeld aan een virtuele server van het type: Load Balancing (LB), Content Switching (CS) of VPN.\n\nDe kwetsbaarheden met de kenmerken CVE-2026-8452 en CVE-2026-8655 bevinden zich in de manier waarop geheugen wordt beheerd in NetScaler ADC en NetScaler Gateway. Dit kan leiden tot een denial-of-service (DoS) of een ongewenste control flow wanneer de producten zijn geconfigureerd als Gateway, DNS-proxy, recursieve DNS-resolver of AAA-virtuele server.\n\nDe kwetsbaarheid met het kenmerk CVE-2026-13474 ontstaat door het onjuist vrijgeven van geheugen. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken door via speciaal geprepareerde HTTP/2-verzoeken een denial-of-service (DoS) te veroorzaken.\n\nDe kwetsbaarheid met het kenmerk CVE-2026-10816 betreft een probleem met de toegangscontrole binnen de Management Interface. Niet-geauthenticeerde kwaadwillenden op afstand kunnen de kwetsbaarheid misbruiken om willekeurige bestanden uit te lezen. Dit kan resulteren in ongeautoriseerde openbaarmaking van gevoelige informatie.\n\nOnderzoekers hebben Proof-of-Concept (PoC) code gedeeld waarmee de kwetsbaarheid met kenmerk CVE-2026-8451 kan worden aangetoond.", "creation_timestamp": "2026-07-01T01:00:46.586877Z"}, {"uuid": "d8d80fda-33dd-4cd0-8648-1d98088f99a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-645", "content": "", "creation_timestamp": "2026-07-01T02:37:53.676894Z"}, {"uuid": "5b5b8fc5-5d2b-4e4b-8279-a3a07c876cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpkmxmybse2l", "content": "Citrix patched six NetScaler flaws, including CVE-2026-8451, a high-severity memory disclosure bug linked to CitrixBleed-like issues in SAML auth parsing. #Citrix #NetScaler #CVE-2026-8451", "creation_timestamp": "2026-07-01T04:00:25.922189Z"}, {"uuid": "090a2f1e-542a-4763-a257-069e0aa7648e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.html", "content": "Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to facilitate arbitrary file reads or trigger a denial-of-service (DoS) condition.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-8451 (CVSS score: 8.8) - An insufficient input validation", "creation_timestamp": "2026-07-01T07:00:47.915018Z"}, {"uuid": "3b95fe79-c1cf-4773-8fa5-dd9e4bad3e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ecf78090-6993-45d3-aa99-c6de905a5e7a", "content": "", "creation_timestamp": "2026-07-01T07:59:26.932836Z"}, {"uuid": "ef78be22-aeab-4623-9e06-fd18553dad02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mplhwnfofk2p", "content": "Citrix fixed six NetScaler flaws, including a pre-login memory leak (CVE-2026-8451) and an HTTP/2 Bomb denial of service.\n\nOne catch: the HTTP/2 fix does nothing until you enable HTTP Strict Profiles.\n\nUpgrade to 14.1-72.61 / 13.1-63.18, then check the setting.", "creation_timestamp": "2026-07-01T12:03:04.581588Z"}, {"uuid": "a067f862-8c55-4cc0-bf11-d3c4727f78a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4nsdet23", "content": "\ud83d\udd17 CVE : CVE-2026-10816, CVE-2026-10817, CVE-2026-13474, CVE-2026-8451, CVE-2026-8452, CVE-2026-8655", "creation_timestamp": "2026-07-01T13:00:06.564831Z"}, {"uuid": "63f13518-05a2-4058-aeec-ebe508c9e016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-citrix-10", "content": "", "creation_timestamp": "2026-07-01T13:45:06.812694Z"}, {"uuid": "bee5e5a5-bc27-48b8-8d2f-4be9886b1854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116845190558867458", "content": "A lot of offensive activities were identified targeting Citrix NetScaler ADC and NetScaler Gateway (CVE-2026-8451) https://vuldb.com/vuln/374866/cti", "creation_timestamp": "2026-07-01T14:28:36.125577Z"}, {"uuid": "5db59e46-4484-42aa-a529-95c834fca007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116847526255308726", "content": "\u203c\ufe0f CVE-2026-8451: Citrix Netscaler overread Detection Artifact Generator Tool\nGitHub: https://github.com/watchtowrlabs/watchTowr-vs-Netscaler-CVE-2026-8451\nFull writeup: https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/\nCVE-2026-8451 is a NetScaler ADC and NetScaler Gateway memory overread flaw caused by insufficient input validation, affecting appliances configured as a SAML Identity Provider.\nThe risk is sensitive memory disclosure, with researchers showing NetScaler can be tricked into returning process memory that should never leave the appliance.", "creation_timestamp": "2026-07-02T00:22:42.899579Z"}, {"uuid": "c4c70d9a-b749-44e1-a16b-3fe0768c928c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.html", "content": "Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to facilitate arbitrary file reads or trigger a denial-of-service (DoS) condition.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-8451 (CVSS score: 8.8) - An insufficient input validation", "creation_timestamp": "2026-07-02T01:00:41.765961Z"}, {"uuid": "dac1592f-0979-42b4-9f9e-a813e7e2116d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway die verband houden met onvoldoende invoervalidatie, onjuiste toegangscontrole en het onjuist vrijgeven van geheugen. De kwetsbaarheden met de kenmerken CVE-2026-8451 en CVE-2026-10817 ontstaan door onvoldoende invoervalidatie, waarbij de software invoergroottes en -grenzen niet correct controleert. Dit kan leiden tot geheugenoverlezingen, wat kan resulteren in ongeautoriseerde openbaarmaking van gevoelige informatie, wanneer de producten zijn geconfigureerd als SAML IDP, of als TCP TimeStamp is ingeschakeld bij een TCP-profiel dat is gekoppeld aan een virtuele server van het type: Load Balancing (LB), Content Switching (CS) of VPN.\n\nDe kwetsbaarheden met de kenmerken CVE-2026-8452 en CVE-2026-8655 bevinden zich in de manier waarop geheugen wordt beheerd in NetScaler ADC en NetScaler Gateway. Dit kan leiden tot een denial-of-service (DoS) of een ongewenste control flow wanneer de producten zijn geconfigureerd als Gateway, DNS-proxy, recursieve DNS-resolver of AAA-virtuele server.\n\nDe kwetsbaarheid met het kenmerk CVE-2026-13474 ontstaat door het onjuist vrijgeven van geheugen. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken door via speciaal geprepareerde HTTP/2-verzoeken een denial-of-service (DoS) te veroorzaken.\n\nDe kwetsbaarheid met het kenmerk CVE-2026-10816 betreft een probleem met de toegangscontrole binnen de Management Interface. Niet-geauthenticeerde kwaadwillenden op afstand kunnen de kwetsbaarheid misbruiken om willekeurige bestanden uit te lezen. Dit kan resulteren in ongeautoriseerde openbaarmaking van gevoelige informatie.\n\nOnderzoekers hebben Proof-of-Concept (PoC) code gedeeld waarmee de kwetsbaarheid met kenmerk CVE-2026-8451 kan worden aangetoond.\n\n**UPDATE:** Inmiddels hebben dezelfde onderzoekers ook Proof-of-Concept (PoC) code gepubliceerd waarmee uitvoer van willekeurige code mogelijk wordt. Het kwetsbare systeem moet hiervoor wel zijn geconfigureerd om middels SAML ingezet te zijn als Identity Provider. Dit is geen gebruikelijke configuratie, omdat best practices adviseren het Identity Management en Access Management gescheiden te houden.", "creation_timestamp": "2026-08-19T01:00:33.588811Z"}, {"uuid": "6d585771-69fc-431d-942f-2f121fba58c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpnjjznyk22a", "content": "\ud83d\udccc CVE-2026-8451 - Insufficient input validation in\u00a0NetScaler ADC and NetScaler Gateway\u00a0leading to memory overread if\u00a0NetScaler ADC or NetScaler Gateway is configured as... https://www.cyberhub.blog/cves/CVE-2026-8451", "creation_timestamp": "2026-07-02T07:37:08.143012Z"}, {"uuid": "5a879fda-88cd-438d-995e-43eb12101c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mpnmznurhd2u", "content": "CVE-2026-8451: Citrix NetScaler SAML Memory Overread Exploitation and IoCs", "creation_timestamp": "2026-07-02T08:39:32.692448Z"}, {"uuid": "5e3cb282-f728-46da-b123-51dc78b51f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1945", "content": "", "creation_timestamp": "2026-07-02T09:45:25.449288Z"}, {"uuid": "340a2858-3ce0-447b-893a-66b7397820c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mpnval4tes2e", "content": "CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread\nCVE-2026-8451)\nlabs.watchtowr.com/citrixbleed-...", "creation_timestamp": "2026-07-02T11:06:37.843043Z"}, {"uuid": "246761a0-6084-4615-ba29-64349d3ba9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mpoctutaaf2a", "content": "\u65b0\u305f\u306aCitrixBleed\u8106\u5f31\u6027\u3001\u516c\u958b\u76f4\u5f8c\u304b\u3089\u60aa\u7528\u304c\u59cb\u307e\u308b\n\nNetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u306b\u5b58\u5728\u3059\u308b\u6700\u65b0\u306eCitrixBleed\u985e\u4f3c\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u3001\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304c\u516c\u958b\u304b\u3089\u308f\u305a\u304b24\u6642\u9593\u8db3\u3089\u305a\u3067\u60aa\u7528\u3092\u958b\u59cb\u3057\u3066\u3044\u305f\u3053\u3068\u304c\u3001\u30b9\u30b3\u30c3\u30c8\u30e9\u30f3\u30c9\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dLupovis\u306e\u8abf\u67fb\u3067\u660e\u3089\u304b\u306b\u306a\u308a\u307e\u3057\u305f\u3002 CVE-2026-8451(CVSS\u30b9\u30b3", "creation_timestamp": "2026-07-02T15:10:01.845339Z"}, {"uuid": "48271f4a-9ae1-4696-86dc-cb876667853c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mpocxum5v42k", "content": "Threat actors exploited CVE-2026-8451 in NetScaler ADC/Gateway within 24 hours of disclosure, using a SAML IDP XML overread to leak memory via NSC_TASS without authentication.\n", "creation_timestamp": "2026-07-02T15:12:15.443128Z"}, {"uuid": "0d7e2072-32d3-48b7-8200-2d6b22cffa55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mpodl4izqed2", "content": "New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure Hackers are targeting NetScaler appliances using public PoC code to retrieve arbitrary memory content in the HTTP respons...\n\n#Vulnerabilities #Citrix #Citrix #Bleed #CVE-2026-8451\n\nOrigin | Interest | Match", "creation_timestamp": "2026-07-02T15:23:03.393169Z"}, {"uuid": "d6f8b0e4-97c9-4ec8-971b-4f0495b8a22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpogirlq4i2q", "content": "CitrixBleed CVE-2026-8451 was exploited within 24 hours of disclosure, targeting NetScaler ADC and Gateway devices using SAML IDP. The XML parser flaw can leak memory without authentication. #Citrix #NetScaler #Germany", "creation_timestamp": "2026-07-02T16:15:23.494560Z"}, {"uuid": "ba3ae790-7964-4151-a56b-b0b521716278", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4d5dcdca-7d58-4047-beb1-f54f5e5c1bb3", "content": "", "creation_timestamp": "2026-07-02T17:00:20.245015Z"}, {"uuid": "4173e729-57aa-4cc8-8b57-b335ee0185c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mpojkki5md2n", "content": "CitrixBleed vulnerability (CVE-2026-8451) exploited within 24 hours; urgent patching required for NetScaler appliances. #CitrixBleed #NetScaler #CVE20268451 #CyberSecurity #Vulnerability thedailytechfeed.com/citrixbleed-...", "creation_timestamp": "2026-07-02T17:10:04.842161Z"}, {"uuid": "4e87fa52-8b89-44b3-a6a0-0f35ab12fa95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpojouriwc2e", "content": "Citrix NetScaler vulnerability CVE-2026-8451 is exploited in the wild after a public PoC exposed a pre-auth memory overread. Patch now.\n\n#Citrix #NetScaler #CVE20268451 #CitrixBleed #CyberSecurity", "creation_timestamp": "2026-07-02T17:12:30.326694Z"}, {"uuid": "53ad55d0-abc8-4c74-9b62-9e739efba2b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-016-vulnerability-impacting-citrix-netscaler-cve-2026-8451", "content": "", "creation_timestamp": "2026-07-02T21:15:05.191239Z"}, {"uuid": "d060aaa0-0326-4e17-b287-b4ce497ae029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mpp7wsxjxq26", "content": "Citrix NetScaler ADC and Gateway: CVE-2026-8451 and HTTP/2 DoS Vulnerabilities\n\nhttps://www.securityweek.com/citrix-patches-netscaler-vulnerabilities-including-new-http-2-bomb-attack\nhttps://flagthis.com/newsletter/2026/07/02/tldr/4628\n\n##Citrix ##NetScaler ##ZeroDay ##DoS ##Vulnerability", "creation_timestamp": "2026-07-02T23:50:38.709155Z"}, {"uuid": "49677977-8d81-4e8a-ab10-44d558a271d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/citrix-products-multiple-vulnerabilities_20260703", "content": "", "creation_timestamp": "2026-07-03T05:45:03.006732Z"}, {"uuid": "cfafa5c0-74f2-4bc5-89e2-903175980095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpputvjdp52o", "content": "\u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Citrix CVE-2026-8451: \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0438 \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\n\nhttps://kripta.biz/posts/1C30DFBF-894F-4775-A778-9685AC09EB6C", "creation_timestamp": "2026-07-03T06:05:01.408303Z"}, {"uuid": "564e0afc-290d-4e6b-8f51-e3c31cc36019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpputvpzuy2t", "content": "Citrix CVE-2026-8451 \u6f0f\u6d1e\u88ab\u6d3b\u8dc3\u5229\u7528:\u4f01\u4e1a\u5b89\u5168\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/4C1C02AB-C2B0-4C33-A06A-26091132AE71", "creation_timestamp": "2026-07-03T06:05:02.111527Z"}, {"uuid": "53f6c67d-84ad-4bb4-9d4c-6bf680aa2d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mpqj5f222p26", "content": "Citrix disclosed six vulnerabilities in NetScaler ADC and Gateway appliances, including a high-severity memory disclosure flaw (CVE-2026-8451) related to SAML authentication requests. CVSS scores range from 6.9 to 8.8. Customers are advised to install updates and adjust configurations.", "creation_timestamp": "2026-07-03T12:08:02.701751Z"}, {"uuid": "ee31051b-9f36-48b7-ba92-fd3161b016e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8451", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116856453174084994", "content": "\ud83d\udcf0 CitrixBleed-Like Flaw (CVE-2026-8451) Exploited Within 24 Hours\nNew CitrixBleed-like flaw CVE-2026-8451 in NetScaler is being exploited in the wild less than 24 hours after disclosure! The bug can leak sensitive memory. Patch and terminate all sessions NOW. \ud83d\udea8 #Citrix #NetScaler #CyberSecurity #CVE\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/new-citrixbleed-like-flaw-cve-2026-8451-exploited-within-24-hours-of-disclosure/?utm_source=mastodon&utm_\u2026", "creation_timestamp": "2026-07-03T14:12:58.414690Z"}, {"uuid": "d2664998-ae2c-4ba9-af07-958e748f4435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mpqq5jycux2k", "content": "New CitrixBleed-like flaw CVE-2026-8451 in NetScaler is being exploited in the wild less than 24 hours after disclosure! The bug can leak sensitive memory. Patch and terminate all sessions NOW. \ud83d\udea8 #Citrix #NetScaler #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-03T14:13:23.694586Z"}, {"uuid": "1bd2e634-abee-4976-a842-35e661747e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8451", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-d4861f50-d397a0c8dd7527dd", "content": "This Week in Security: Windows 10 Gets Another Year, SmartTV Botnets, Hiding Payloads, and LastPass Customer Leak\nUnsurprisingly to many of us, app stores for smart televisions are also trash. Perhaps even more full of trash than other app stores due to the smaller ecosystem and fewer reviewers.\nSpur analyzed the LG smart TV app store, and found that almost half of the apps available contain proxy software, turning your TV into a node in their proxy network. Are these apps malware? Many of the analyzed apps provided a thin veneer of user consent: they offer you the tradeoff of seeing an ad every 15 seconds, or allowing their \u201coccasional web indexing\u201d to run permanently in the background. Watch the fishtank app for five minutes, join their proxy network for life.\nSpur notes that the proxy SDK in use appears to block connections to private network ranges (internal IP ranges like 192.168.x.x and 10.x.x.x), but that the SDK restricting access to those ranges is the only protection against accessing whatever network the TV is connected to.\nAmazon and Roku ban proxy apps on their devices. Samsung and LG do not.\nWin 10 Security Updates Extended\nMicrosoft has added another year of security updates to Windows 10. Despite trying to kill the platform, so many users remain on Windows 10 that Microsoft likely has no choice.\nThe extended support program was previously due to end in October 2026 but has now been pushed to October 2027. The security updates will be available for free in the UI, but users in other regions must activate OneDrive and sync system settings, or pay 1000 Microsoft credits (about $30).\nThe death of Windows 10 is near, but for those unwilling or unable to let go, it shuffles along.\nSignal Phishing Attempts\nBleeping Computer has an article about increased phishing attempts from hacker groups in Russia targeting Signal users.\nThe phishing messages target politicians, government officials, military, and other high-profile intelligence targets, and claim that Signal is introducing mandatory two-factor authentication, before prompting the target to enable remote Signal backups. A second follow-up phishing attempt then prompts the user to copy the backup authentication tokens from Signal and provide them to the attacker.\nSignal remote backups are a relatively recent addition to the messenger, making a backup on the Signal servers of a users messages and images, encrypted with a key known only to the user. While convenient, and likely fundamentally secure given the track record of the Signal team, this phishing campaign highlights a major weakness: once private content is accessible somewhere else, an attacker simply needs to obtain the keys to access it, which is significantly simpler than obtaining the message content directly from the victims phone.\nPayloads in WiFi and LoRa\nSasha Romijn presented an excellent talk at OrangeCon on embedding attack payloads in unusual places.\nSasha found poor input handling of content from DNS servers, TLS certificates, server headers, DHCP host names, LoRa Mesh node names, WiFi network names, and more. In many cases, it seems to be as simple as embedding JavaScript or CSS inside a string; many sites and utilities don\u2019t sanitize against escaped HTML, and the standards allow it.\nThey then go on to demonstrate more serious impacts, such as compromising the management accounts of two Europe-based hosting providers by injecting content into TLS certificates, and gaining root on some OpenWRT devices via a WiFi SSID which loads a hostile JavaScript into the LUCI web management interface, which then uses the web management system to install a backdoor root shell.\nSasha continues the tour-de-exploits by demonstrating multiple cross-site scripting injections into the Ripe NCC database which then allow browser manipulation of users on the RIPE website. This has enormous implications, because Ripe NCC is the Internet allocation organization for Europe and the Middle East: the company who assigns and manages IP address blocks.\nBe sure to check out the full presentation, and let this be a lesson to always treat all data as hostile, even from what would seem to be your own services!\nCollecting Boot Console Info\nOne of the first steps in getting access to an embedded device is to look for a serial port, or serial port test points. Often this can give an idea what sort of code is running on the system, and in some cases, give direct access via the boot loader or a Linux login console.\nBoot Intel is a web-based tool to automate scraping boot messages from embedded devices, looking for exposed logins and vulnerable services. Boot Intel can take pasted boot logs, or directly connect to the device via WebSerial.\nWhile Boot Intel is a paid service, there is a free version for hackers to explore devices.\nCitrixBleed, again\nwatchTowr Labs is back with another excellent write-up on CitrixBleed, continuing the trend of memory leaks in Citrix Netscaler devices.\nThis collection of vulnerabilities allow leaking internal memory from the Citrix servers, which can expose logs, customer data, encryption keys, or anything else found in server memory. Netscaler devices offer SSL offloading, application acceleration, VPN and remote access, and load balancing; all installations where leaking memory is likely very bad.\nThe watchTower write-up maintains their trend of providing entertaining reads about highly technical topics.  Do yourself a favor and be sure to give it a look!\nBits and Bytes\nLastPass marketing partner Klue was compromised this week, impacting the customer data of multiple companies. Customer data such as email, phone numbers, addresses, and support tickets were exposed, however the LastPass vaults themselves were not impacted. While LastPass has revoked access to the impacted partner, the stolen data could assist phishing attacks against customers.\nThe open source self-hosted video sharing platform PeerTube has released an emergency update which addresses multiple vulnerabilities. While the release notes quote \u201cmedium to high severity\u201d vulnerabilities, there are no specific details. If you run a PeerTube server, upgrade now!\nBoth Apple AirDrop and Google Quick Share have new vulnerabilities reported this week, with fixes coming soon. Both protocols are designed to allow file sharing to nearby devices, and accordingly, the issues found on them can be triggered on nearby devices. Researchers were able to find six vulnerabilities in macOS, iOS, Windows, and Android implementations of the sharing protocols. All of the discovered vulnerabilities led to crashes, but not full exploit and code execution. Sustained denial of service attacks were possible however, with nearby attackers able to keep the services unreachable and unusable for the duration. \nhackaday.com/2026/07/03/this-w\u2026", "creation_timestamp": "2026-07-03T14:25:52.695979Z"}, {"uuid": "7ea4efb5-4c3e-41c2-8b92-a219a5c68bcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116857129584290393", "content": "A CitrixBleed-like memory overread vulnerability (CVE-2026-8451) in NetScaler appliances is currently being exploited in the wild, prompting Citrix to release urgent security patches. Organizations are advised to upgrade their NetScaler ADC and Gateway appliances immediately to mitigate this high-severity threat.https://www.csoonline.com/article/4192741/new-citrixbleed-like-netscaler-flaw-sees-exploit-attempts-in-the-wild.html", "creation_timestamp": "2026-07-03T17:04:51.641970Z"}, {"uuid": "d5737132-8cdc-46ae-af09-675a99c89fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mpqzqrqap22s", "content": "A CitrixBleed-like memory overread vulnerability (CVE-2026-8451) in NetScaler appliances is currently being exploited in the wild, prompting Citrix to release urgent security patches.\nwww.csoonline.com/article/4192...", "creation_timestamp": "2026-07-03T17:05:14.980584Z"}, {"uuid": "b8fedf11-134c-4b2c-af18-82ff8f64dcee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://threatintel.cc/2026/07/03/new-citrixbleedlike-netscaler-flaw-sees.html", "content": "New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild | CSO Online\n\nA CitrixBleed-like memory overread vulnerability (CVE-2026-8451) in NetScaler appliances is currently being exploited in the wild, prompting Citrix to release urgent security patches. Organizations are advised to upgrade their NetScaler ADC and Gateway appliances immediately to mitigate this high-severity threat.", "creation_timestamp": "2026-07-03T19:00:43.555686Z"}, {"uuid": "c9de269c-5cdd-439e-a110-bdbff6a1a337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://threatintel.cc/2026/07/03/new-citrixbleedlike-netscaler-flaw-sees.html", "content": "New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild | CSO Online\n\nA CitrixBleed-like memory overread vulnerability (CVE-2026-8451) in NetScaler appliances is currently being exploited in the wild, prompting Citrix to release urgent security patches. Organizations are advised to upgrade their NetScaler ADC and Gateway appliances immediately to mitigate this high-severity threat.", "creation_timestamp": "2026-07-04T01:01:32.792878Z"}, {"uuid": "2c269bc4-77c5-42bf-b492-96e3cbdedafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mptfsr6kuf27", "content": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474 #patchmanagement", "creation_timestamp": "2026-07-04T15:46:23.497871Z"}, {"uuid": "99906a2b-053d-405f-9a47-30944ac6fe22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3mptg7u7xes2k", "content": "\ud83d\udc40 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474\nsupport.citrix.com/support-home...", "creation_timestamp": "2026-07-04T15:53:43.372210Z"}, {"uuid": "6c83a532-88ef-4c38-b30c-ff41a00ec9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mptgj5oqck2y", "content": "Critical Memory Overread Vulnerability in Citrix NetScaler CVE-2026-8451\n\nhttps://www.securityweek.com/new-citrixbleed-vulnerability-exploited-immediately-after-public-disclosure\nhttps://flagthis.com/tldr/4739\n\n##Citrix ##NetScaler ##CVE20268451 ##MemoryOverread ##Vulnerability", "creation_timestamp": "2026-07-04T15:58:54.945902Z"}, {"uuid": "6f221747-1f77-4eb6-9394-fecdaad1d83b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mpttyu2p572v", "content": "Citrix NetScaler ADC/Gateway patches six flaws (incl. CVE-2026-8451) enabling file read or DoS. Patch immediately and verify the mitigations in place. #Cybersecurity #Vulnerability #CloudSecurity\n\nSource: https://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.html", "creation_timestamp": "2026-07-04T20:00:20.792653Z"}, {"uuid": "4b3f6577-1577-48ee-bc13-0e4d0195ab50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/pphm_HackerNews/1736", "content": "\ud83d\udd34 Citrix Patches Critical NetScaler Flaw Resembling CitrixBleed\n\nAn urgent security update for Citrix NetScaler fixes 6 flaws, including a critical memory exposure vulnerability CVE-2026-8451 (CVSS score 8.8), a critical bug reminiscent of CitrixBleed. \n\nThe weakness affects systems defined as SAML IDP and allows attackers, without the need for authentication, to extract sensitive information from memory (such as tokens and active sessions) by sending malicious requests.\n\nFor security teams, this is a critical update that requires immediate action to prevent direct access to the corporate network and user sessions.", "creation_timestamp": "2026-08-22T00:00:27.146059Z"}, {"uuid": "57476ee3-3fcc-4afe-bfe5-c8f24431e403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/geeknik.bsky.social/post/3mpvkuvjndu2r", "content": "CVE-2026-8451 hit NetScaler SAML IDP instances within hours of disclosure, unauthenticated memory leak via XML parser bug. Patch now or disable SAML IDP, no excuses left.", "creation_timestamp": "2026-07-05T12:22:25.262445Z"}, {"uuid": "36d69cf6-0f6a-4b56-a247-14bea9ad345b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mpwf4ol6cv2o", "content": "CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)", "creation_timestamp": "2026-07-05T20:12:03.931627Z"}, {"uuid": "218e6f06-abe1-40cd-8468-e055914cf916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mpwrz6kjjs2b", "content": "\u65b0\u305f\u306aCitrix Bleed \u7cfb \u8106\u5f31\u6027\u3001\u516c\u958b\u304b\u308924\u6642\u9593\u4ee5\u5185\u306b\u60aa\u7528\u958b\u59cb-CVE-2026-8451\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack", "creation_timestamp": "2026-07-06T00:02:46.129899Z"}, {"uuid": "7d266542-2343-4fca-b8d3-7965dcd7b9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mpxyg6tc5t2g", "content": "Citrix has released security updates for NetScaler ADC & Gateway fixing multiple flaws, including CVE-2026-8451 (CVSS 8.8), risking file reads & DoS. Update now to stay protected.", "creation_timestamp": "2026-07-06T11:30:03.062661Z"}, {"uuid": "4249d262-a74f-4f34-a4bd-6beaa59efaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mpy24kq7yo2w", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-46817, CVE-2026-48558, CVE-2026-8451, CVE-2026-45659, CVE-2026-12569\nActors: Ransomware, Apt, Scattered Spider\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-06T12:00:26.132995Z"}, {"uuid": "85ca1164-e4a4-49f9-8715-e9fc99828394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3mpy2zy2i3s2a", "content": "\ud83d\udea8 In this week\u2019s newsletter, we cover CVE-2026-8451, a high-severity SAML memory overread vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway that is already seeing active exploitation. \n\nRead the full analysis and protect your systems \ud83d\udc49 www.crowdsec.net/vulntracking...", "creation_timestamp": "2026-07-06T12:15:32.596396Z"}, {"uuid": "7f556000-dc5f-433b-afbf-5ff206bceea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mpy42jgs772u", "content": "~Checkpoint~\nMultiple ransomware attacks hit financial and defense sectors; critical CVEs in Oracle EBS, Citrix NetScaler, and Kemp LoadMaster are actively exploited.\n-\nIOCs: CVE-2026-46817, CVE-2026-8451, CVE-2026-8037\n-\n...", "creation_timestamp": "2026-07-06T12:35:05.199457Z"}, {"uuid": "fa8f48c5-5d82-4948-98e8-69324f863f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8451", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116873760049738110", "content": "\ud83d\udcf0 CitrixBleed-Like Flaw (CVE-2026-8451) Exploited Within 24 Hours\nNew CitrixBleed-like flaw CVE-2026-8451 in NetScaler is being exploited in the wild less than 24 hours after disclosure! The bug can leak sensitive memory. Patch and terminate all sessions NOW. \ud83d\udea8 #Citrix #NetScaler #CyberSecurity #CVE\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/new-citrixbleed-like-flaw-cve-2026-8451-exploited-within-24-hours-of-disclosure/?utm_source=mastodon&utm_\u2026", "creation_timestamp": "2026-07-06T15:34:14.351621Z"}, {"uuid": "97b4a62a-f4ff-4138-9920-88f856e58256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mpyg436duf2a", "content": "New CitrixBleed-like flaw CVE-2026-8451 in NetScaler is being exploited in the wild less than 24 hours after disclosure! The bug can leak sensitive memory. Patch and terminate all sessions NOW. \ud83d\udea8 #Citrix #NetScaler #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-06T15:34:54.547477Z"}, {"uuid": "49e700e7-03c3-4b12-a898-b110bf7b3399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/bestofhn.bsky.social/post/3mq26y7ohfk2p", "content": "A new Citrix NetScaler SAML flaw lets attackers read out-of-bounds memory, actively exploited in the wild.\n\nSubmit to upvote on HN\nhttps://news.ycombinator.com/submitlink?u=https%3A%2F%2Fwww.lupovis.io%2Flupovis-insights%2F&t=CVE-2026-8451%3A%20Citrix%20NetScaler%20SAML%20Memory%20Overread", "creation_timestamp": "2026-07-07T08:32:50.166913Z"}, {"uuid": "7ca8c75e-7ff1-4a1b-b3a6-84b3b798a551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8451", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116879742063793514", "content": "\ud83d\udcf0 CitrixBleed-Like Flaw (CVE-2026-8451) Exploited Within 24 Hours\nNew CitrixBleed-like flaw CVE-2026-8451 in NetScaler is being exploited in the wild less than 24 hours after disclosure! The bug can leak sensitive memory. Patch and terminate all sessions NOW. \ud83d\udea8 #Citrix #NetScaler #CyberSecurity #CVE\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/new-citrixbleed-like-flaw-cve-2026-8451-exploited-within-24-hours-of-disclosure/?utm_source=mastodon&utm_\u2026", "creation_timestamp": "2026-07-07T16:55:31.012079Z"}, {"uuid": "4ae24f7f-9785-4623-9daa-0fdcb7bd3a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mq333y25g62s", "content": "New CitrixBleed-like flaw CVE-2026-8451 in NetScaler is being exploited in the wild less than 24 hours after disclosure! The bug can leak sensitive memory. Patch and terminate all sessions NOW. \ud83d\udea8 #Citrix #NetScaler #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-07T16:55:59.352104Z"}, {"uuid": "77b759ff-9ce0-4a08-a028-f19bee270294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8451", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116880278868082114", "content": "CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/", "creation_timestamp": "2026-07-07T19:12:01.480892Z"}, {"uuid": "86d0f6d6-a1dc-4d65-9ecd-2269d93ae3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mq3malnhxf2s", "content": "\ud83d\udd12 CVE-2026-8451: Citrix NetScaler SAML Memory Overread\n\nA high-severity memory overread vulnerability, CVE-2026-8451, is actively being exploited in Citrix NetScaler appliances conf...\n\nhttps://tinyurl.com/2awkoom7 #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-07-07T22:02:47.971037Z"}, {"uuid": "7a41053e-a382-4cd9-bca6-a1a45912b271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mq4qy6fbth25", "content": "Citrix on June 30 took the wraps off CVE-2026-8451, the memory overread vulnerability in the company's Netscaler product line that received a CVSS score of 8.8.", "creation_timestamp": "2026-07-08T09:00:13.996472Z"}, {"uuid": "4c324ce8-f6d7-48f1-8f08-9bfc8f8707c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8451", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3mq62pf7k2d62", "content": "CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/", "creation_timestamp": "2026-07-08T21:26:58.831316Z"}, {"uuid": "0df0c653-e292-4b56-ac86-11f1453ba6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway die verband houden met onvoldoende invoervalidatie, onjuiste toegangscontrole en het onjuist vrijgeven van geheugen. De kwetsbaarheden met de kenmerken CVE-2026-8451 en CVE-2026-10817 ontstaan door onvoldoende invoervalidatie, waarbij de software invoergroottes en -grenzen niet correct controleert. Dit kan leiden tot geheugenoverlezingen, wat kan resulteren in ongeautoriseerde openbaarmaking van gevoelige informatie, wanneer de producten zijn geconfigureerd als SAML IDP, of als TCP TimeStamp is ingeschakeld bij een TCP-profiel dat is gekoppeld aan een virtuele server van het type: Load Balancing (LB), Content Switching (CS) of VPN.\n\nDe kwetsbaarheden met de kenmerken CVE-2026-8452 en CVE-2026-8655 bevinden zich in de manier waarop geheugen wordt beheerd in NetScaler ADC en NetScaler Gateway. Dit kan leiden tot een denial-of-service (DoS) of een ongewenste control flow wanneer de producten zijn geconfigureerd als Gateway, DNS-proxy, recursieve DNS-resolver of AAA-virtuele server.\n\nDe kwetsbaarheid met het kenmerk CVE-2026-13474 ontstaat door het onjuist vrijgeven van geheugen. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken door via speciaal geprepareerde HTTP/2-verzoeken een denial-of-service (DoS) te veroorzaken.\n\nDe kwetsbaarheid met het kenmerk CVE-2026-10816 betreft een probleem met de toegangscontrole binnen de Management Interface. Niet-geauthenticeerde kwaadwillenden op afstand kunnen de kwetsbaarheid misbruiken om willekeurige bestanden uit te lezen. Dit kan resulteren in ongeautoriseerde openbaarmaking van gevoelige informatie.\n\nOnderzoekers hebben Proof-of-Concept (PoC) code gedeeld waarmee de kwetsbaarheid met kenmerk CVE-2026-8451 kan worden aangetoond.\n\n**UPDATE:** Inmiddels hebben dezelfde onderzoekers ook Proof-of-Concept (PoC) code gepubliceerd waarmee uitvoer van willekeurige code mogelijk wordt. Het kwetsbare systeem moet hiervoor wel zijn geconfigureerd om middels SAML ingezet te zijn als Identity Provider. Dit is geen gebruikelijke configuratie, omdat best practices adviseren het Identity Management en Access Management gescheiden te houden.", "creation_timestamp": "2026-08-18T10:00:44.048677Z"}, {"uuid": "1cf55cbe-e162-4431-a98a-1ae26b241dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/true_secator/8365", "content": "Citrix \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f NetScaler ADC \u0438 NetScaler Gateway \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c HTTP/2 Bomb \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0443\u044e CitrixBleed.\n\n\u0427\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, CVE-2026-8451, CVE-2026-8452, CVE-2026-8655 \u0438 CVE-2026-10816, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041f\u044f\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-10816, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438, \u0430 \u0448\u0435\u0441\u0442\u0430\u044f - \u044d\u0442\u043e\u00a0HTTP/2 Bomb, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0430\u044f DoS \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 Apache HTTP Server.\n\nHTTP/2 Bomb, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-49975 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Codex \u043e\u0442 OpenAI, \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f. Citrix \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0439 \u0434\u043b\u044f NetScaler, - CVE-2026-13474.\n\n\u0412\u0441\u0435 \u044d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 NetScaler ADC \u0438 NetScaler Gateway 14.1-72.61 \u0438 13.1-63.18, \u0432 NetScaler ADC FIPS 14.1-72.61 FIPS, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 NetScaler ADC FIPS \u0438 NDcPP 13.1-37.272.\n\nCitrix \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0430\u0436\u0434\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0438\u0435 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0438 \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432 \u0438\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c watchTowr, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c Citrix \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 CVE-2026-8451 (CVSS 8,8), \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u00a0\u0441\u0435\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0CitrixBleed.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 XML-\u043f\u0430\u0440\u0441\u0435\u0440 NetScaler, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u043a\u0430\u0436\u0434\u043e\u0433\u043e XML-\u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c NetScaler \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0435\u0433\u043e \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 HTTP-\u043e\u0442\u0432\u0435\u0442\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 NetScaler \u0431\u044b\u043b \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML, \u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0432\u0445\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0443\u0434\u043e\u0432\u043b\u0435\u0442\u0432\u043e\u0440\u044f\u043b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u043c.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c watchTowr, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c NetScaler ADC, NetScaler Gateway \u0438 Citrix Secure Private Access Hybrid \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 NetScaler, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2026-07-13T13:00:05.979340Z"}, {"uuid": "e7919b6e-8b26-45c9-980b-a38b0e7d5f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/GithubRedTeam/92782", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8451-CitrixBleed\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a amnsecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-10 05:41:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-8451 - Citrix NetScaler SAML Memory Overread (CitrixBleed) - PoC & Analysis | CVSS 8.8 | AMN SECURITY\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:05.679642Z"}, {"uuid": "96c14f25-cc7f-441e-a87d-713d769ce40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92782", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8451-CitrixBleed\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a amnsecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-10 05:41:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-8451 - Citrix NetScaler SAML Memory Overread (CitrixBleed) - PoC & Analysis | CVSS 8.8 | AMN SECURITY\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:07.200738Z"}, {"uuid": "d312abe4-6bff-42ab-99ae-ad124247a34b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/true_secator/8365", "content": "Citrix \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f NetScaler ADC \u0438 NetScaler Gateway \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c HTTP/2 Bomb \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0443\u044e CitrixBleed.\n\n\u0427\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, CVE-2026-8451, CVE-2026-8452, CVE-2026-8655 \u0438 CVE-2026-10816, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041f\u044f\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-10816, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438, \u0430 \u0448\u0435\u0441\u0442\u0430\u044f - \u044d\u0442\u043e\u00a0HTTP/2 Bomb, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0430\u044f DoS \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 Apache HTTP Server.\n\nHTTP/2 Bomb, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-49975 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Codex \u043e\u0442 OpenAI, \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f. Citrix \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0439 \u0434\u043b\u044f NetScaler, - CVE-2026-13474.\n\n\u0412\u0441\u0435 \u044d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 NetScaler ADC \u0438 NetScaler Gateway 14.1-72.61 \u0438 13.1-63.18, \u0432 NetScaler ADC FIPS 14.1-72.61 FIPS, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 NetScaler ADC FIPS \u0438 NDcPP 13.1-37.272.\n\nCitrix \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0430\u0436\u0434\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0438\u0435 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0438 \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432 \u0438\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c watchTowr, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c Citrix \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 CVE-2026-8451 (CVSS 8,8), \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u00a0\u0441\u0435\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0CitrixBleed.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 XML-\u043f\u0430\u0440\u0441\u0435\u0440 NetScaler, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u043a\u0430\u0436\u0434\u043e\u0433\u043e XML-\u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c NetScaler \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0435\u0433\u043e \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 HTTP-\u043e\u0442\u0432\u0435\u0442\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 NetScaler \u0431\u044b\u043b \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML, \u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0432\u0445\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0443\u0434\u043e\u0432\u043b\u0435\u0442\u0432\u043e\u0440\u044f\u043b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u043c.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c watchTowr, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c NetScaler ADC, NetScaler Gateway \u0438 Citrix Secure Private Access Hybrid \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 NetScaler, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2026-07-14T00:00:46.824761Z"}, {"uuid": "005bedfe-8b74-4084-b1ee-57f5f7a6966d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/bdufstecru/3278", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML IDP \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 NetScaler ADC (\u0440\u0430\u043d\u0435\u0435 Citrix ADC) \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 NetScaler Gateway (\u0440\u0430\u043d\u0435\u0435 Citrix Gateway) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08971\nCVE-2026-8451\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0441\u0442\u0440\u043e\u043a\u0438 \"add authentication samlIdPProfile .*\" \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML IDP \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).", "creation_timestamp": "2026-07-14T01:00:05.237855Z"}, {"uuid": "cb7d13db-d21f-4738-9f5d-ad35e6e0b046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/bdufstecru/3278", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML IDP \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 NetScaler ADC (\u0440\u0430\u043d\u0435\u0435 Citrix ADC) \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 NetScaler Gateway (\u0440\u0430\u043d\u0435\u0435 Citrix Gateway) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08971\nCVE-2026-8451\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0441\u0442\u0440\u043e\u043a\u0438 \"add authentication samlIdPProfile .*\" \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML IDP \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).", "creation_timestamp": "2026-07-15T00:00:34.929296Z"}, {"uuid": "783aee09-4b48-4884-9deb-6395beb97496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "exploited", "source": "https://t.me/thehackernews/9400", "content": "\ud83d\udea8 Update - Citrix CVE-2026-8451 is now under active exploitation, less than 24 hours after disclosure.\n\nA Frankfurt IP hit sensors for 5 hours, delivering the watchTowr exploit only after a 200 OK response and skipping 404s.\n\nLearn the malformed SAML exploit path works: https://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.html", "creation_timestamp": "2026-07-15T12:00:03.491517Z"}, {"uuid": "41e16a36-1e26-4efe-9a5b-f56b4560162b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/10629", "content": "CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)\n\nhttps://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/", "creation_timestamp": "2026-07-15T12:00:04.012955Z"}, {"uuid": "cd982584-18e1-4ed1-98bf-a09513572609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "exploited", "source": "https://t.me/thehackernews/9400", "content": "\ud83d\udea8 Update - Citrix CVE-2026-8451 is now under active exploitation, less than 24 hours after disclosure.\n\nA Frankfurt IP hit sensors for 5 hours, delivering the watchTowr exploit only after a 200 OK response and skipping 404s.\n\nLearn the malformed SAML exploit path works: https://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.html", "creation_timestamp": "2026-07-16T00:00:19.300938Z"}, {"uuid": "f7c0f943-0ea1-4d4d-90ab-e79cae8cc27e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/10629", "content": "CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)\n\nhttps://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/", "creation_timestamp": "2026-07-16T00:00:19.772147Z"}, {"uuid": "63704d8d-5051-463f-bc9f-c19d5c3054ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "Telegram/8QYdX3wwzEqzJLaSNi6hVksRMW6mWNFxEw6eU-zImXltKjM", "content": "", "creation_timestamp": "2026-07-16T19:00:23.029619Z"}, {"uuid": "e6385793-101f-44ee-b23a-0f123d395cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-16T19:00:17.295298Z"}, {"uuid": "35792089-25c2-4205-8b1f-420640e4e513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-16T19:00:25.751927Z"}, {"uuid": "6819c878-5f33-4ade-b96d-769cfaeeaa96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-17T00:00:32.733271Z"}, {"uuid": "c608ab2a-d944-48f8-b148-f68ba7edda6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "Telegram/8QYdX3wwzEqzJLaSNi6hVksRMW6mWNFxEw6eU-zImXltKjM", "content": "", "creation_timestamp": "2026-07-17T00:00:39.562799Z"}, {"uuid": "85cb0882-292d-45fc-a85d-97c0ee3b1616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-17T00:00:42.002951Z"}, {"uuid": "56be67c0-797e-4ad2-a73c-10a528948beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "published-proof-of-concept", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-18T00:00:09.680852Z"}, {"uuid": "596b349d-3d1a-405b-a5e2-03edbfc93167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "published-proof-of-concept", "source": "Telegram/8QYdX3wwzEqzJLaSNi6hVksRMW6mWNFxEw6eU-zImXltKjM", "content": "", "creation_timestamp": "2026-07-18T00:00:11.250702Z"}, {"uuid": "88e096fe-200d-440a-9026-3b042e620400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "published-proof-of-concept", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-18T00:00:33.436312Z"}, {"uuid": "51e643c8-ccf2-4909-be20-9d90c837ce32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "Telegram/Fz6BAAgEd1_5FPSDZNtoygin2AtaYaNUWWZE8jsILfhbiQ", "content": "", "creation_timestamp": "2026-07-18T13:00:04.699570Z"}, {"uuid": "b944f8fb-c45d-4d7d-b429-7ed06462f277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "Telegram/Fz6BAAgEd1_5FPSDZNtoygin2AtaYaNUWWZE8jsILfhbiQ", "content": "", "creation_timestamp": "2026-07-19T00:00:27.387722Z"}, {"uuid": "42110b19-13b3-4b65-a14b-0964a38e29cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/pphm_HackerNews/1736", "content": "\ud83d\udd34 Citrix Patches Critical NetScaler Flaw Resembling CitrixBleed\n\nAn urgent security update for Citrix NetScaler fixes 6 flaws, including a critical memory exposure vulnerability CVE-2026-8451 (CVSS score 8.8), a critical bug reminiscent of CitrixBleed. \n\nThe weakness affects systems defined as SAML IDP and allows attackers, without the need for authentication, to extract sensitive information from memory (such as tokens and active sessions) by sending malicious requests.\n\nFor security teams, this is a critical update that requires immediate action to prevent direct access to the corporate network and user sessions.", "creation_timestamp": "2026-08-23T00:00:42.185520Z"}, {"uuid": "f39d8c7c-6112-404e-ab8a-a6a46b313157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/infosec_ita_notizie/3170", "content": "\u2615 CYBERBRIEFING \u2014 Venerd\u00ec 3 luglio 2026\n\n\u2615 CYBERBRIEFING \u2014 Venerd\u00ec 3 luglio 2026 Il tuo riassunto quotidiano di cybersecurity da leggere con il caff\u00e8. \ud83d\udd34 IN PRIMO PIANO Nuova falla critica in Citrix NetScaler sfruttata in poche ore: rischio account aziendali Una nuova vulnerabilit\u00e0 critica in Citrix NetScaler (CVE-2026-8451), soprannominata\u2026\n\n\n\ud83d\udc49Leggi tutti gli aggiornamenti delle ultime 24 ore: https://ilpuntocyber.rfeed.it/article.php?s=2026-07-03", "creation_timestamp": "2026-07-21T04:00:08.167535Z"}, {"uuid": "66724823-a44e-4f22-b4a3-bd66fe837439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/infosec_ita_notizie/3170", "content": "\u2615 CYBERBRIEFING \u2014 Venerd\u00ec 3 luglio 2026\n\n\u2615 CYBERBRIEFING \u2014 Venerd\u00ec 3 luglio 2026 Il tuo riassunto quotidiano di cybersecurity da leggere con il caff\u00e8. \ud83d\udd34 IN PRIMO PIANO Nuova falla critica in Citrix NetScaler sfruttata in poche ore: rischio account aziendali Una nuova vulnerabilit\u00e0 critica in Citrix NetScaler (CVE-2026-8451), soprannominata\u2026\n\n\n\ud83d\udc49Leggi tutti gli aggiornamenti delle ultime 24 ore: https://ilpuntocyber.rfeed.it/article.php?s=2026-07-03", "creation_timestamp": "2026-07-22T00:00:31.876579Z"}, {"uuid": "c3f4f8db-daab-4f4a-86ba-03b2a4d504aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8451", "type": "seen", "source": "https://bsky.app/profile/threatclaw.bsky.social/post/3mrerqhuyxl2p", "content": "Citrix NetScaler: CitrixBleed Strikes Again (CVE-2026-8451), the WAF as Shield\n\nA NetScaler memory leak in SAML IdP mode replays the CitrixBleed scenario: token theft, MFA\u2026\n\nhttps://threatclaw.io/en/blog/citrix-netscaler-citrixbleed-cve-2026-8451-waf-detection\n\n#infosec #ThreatDetection #DFIR #CVE", "creation_timestamp": "2026-07-24T07:00:19.413394Z"}, {"uuid": "6e6a1c6c-c147-4c27-b3dc-9eefbd594681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/cult_security/1553", "content": "\u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0437\u0430\u0441\u0432\u0435\u0442\u0438\u043b\u0438\u0441\u044c \u0441\u043e\u0442\u043d\u0438 \u0434\u044b\u0440\u044f\u0432\u044b\u0445 Citrix\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Bi.Z\u043en\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0432\u044b\u0448\u0435 200 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Citrix NetScaler, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-8451. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0435\u0449\u0451 \u0434\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0414\u044b\u0440\u0430 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 7,5 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e CVSS \u0431\u044c\u0451\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043a SAML Identity Provider. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0435\u0440\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0438\u0437 \u044d\u0442\u0438\u0445 \u0434\u0432\u0443\u0445 \u0441\u043e\u0442\u0435\u043d \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u043a\u0440\u0443\u043f\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0447\u0442\u043e \u0433\u0440\u043e\u0437\u0438\u0442 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u0430\u0440\u0430\u043b\u0438\u0447\u043e\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u041e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u043e\u0432\u043e\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u043d\u0435 \u0442\u043e\u0440\u0447\u0438\u0442 \u043b\u0438 \u0432\u0430\u0448 \u0448\u043b\u044e\u0437 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-26T02:02:55.564850Z"}, {"uuid": "327d0328-75dc-4b64-81a9-25ca1d404277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/cult_security/1553", "content": "\u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0437\u0430\u0441\u0432\u0435\u0442\u0438\u043b\u0438\u0441\u044c \u0441\u043e\u0442\u043d\u0438 \u0434\u044b\u0440\u044f\u0432\u044b\u0445 Citrix\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Bi.Z\u043en\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0432\u044b\u0448\u0435 200 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Citrix NetScaler, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-8451. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0435\u0449\u0451 \u0434\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0414\u044b\u0440\u0430 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 7,5 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e CVSS \u0431\u044c\u0451\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043a SAML Identity Provider. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0435\u0440\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0438\u0437 \u044d\u0442\u0438\u0445 \u0434\u0432\u0443\u0445 \u0441\u043e\u0442\u0435\u043d \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u043a\u0440\u0443\u043f\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0447\u0442\u043e \u0433\u0440\u043e\u0437\u0438\u0442 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u0430\u0440\u0430\u043b\u0438\u0447\u043e\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u041e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u043e\u0432\u043e\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u043d\u0435 \u0442\u043e\u0440\u0447\u0438\u0442 \u043b\u0438 \u0432\u0430\u0448 \u0448\u043b\u044e\u0437 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-27T00:01:22.575892Z"}, {"uuid": "e5592f7e-6b61-4fdf-b0a0-fdba0ce4d8a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/cult_security/1553", "content": "\u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0437\u0430\u0441\u0432\u0435\u0442\u0438\u043b\u0438\u0441\u044c \u0441\u043e\u0442\u043d\u0438 \u0434\u044b\u0440\u044f\u0432\u044b\u0445 Citrix\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Bi.Z\u043en\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0432\u044b\u0448\u0435 200 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Citrix NetScaler, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-8451. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0435\u0449\u0451 \u0434\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0414\u044b\u0440\u0430 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 7,5 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e CVSS \u0431\u044c\u0451\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043a SAML Identity Provider. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0435\u0440\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0438\u0437 \u044d\u0442\u0438\u0445 \u0434\u0432\u0443\u0445 \u0441\u043e\u0442\u0435\u043d \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u043a\u0440\u0443\u043f\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0447\u0442\u043e \u0433\u0440\u043e\u0437\u0438\u0442 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u0430\u0440\u0430\u043b\u0438\u0447\u043e\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u041e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u043e\u0432\u043e\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u043d\u0435 \u0442\u043e\u0440\u0447\u0438\u0442 \u043b\u0438 \u0432\u0430\u0448 \u0448\u043b\u044e\u0437 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-28T14:00:06.074569Z"}, {"uuid": "d860bb81-8cad-433b-aec7-a4291c1a063e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqinesgbc2q", "content": "\u300cNetScaler ADC/Gateway\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u4fee\u6b63\n\n\u300cNetScaler ADC\uff08\u65e7Citrix ADC\uff09\u300d\u304a\u3088\u3073\u300cNetScaler Gateway\uff08\u65e7Citrix Gateway\uff09\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\u3067\u304d\u308b\u3060\u3051\u65e9\u304f\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u9069\u7528\u3059\u308b\u3088\u3046\u547c\u3073\u304b\u3051\u3089\u308c\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-8451\u300d\u306f\u3001\u5165\u529b\u691c\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027\u3002\u300cSAML IDP\u300d\u3068\u3057\u3066\u69cb\u6210\u3057\u3066\u3044\u308b\u5834\u5408\u306b\u5f71\u97ff\u304c\u3042\u308a\u3001\u57df\u5916\u306e\u30e1\u30e2\u30ea\u3092\u8aad\u307f\u8fbc\u3080\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u4e00\u65b9\u300cCVE-2026-8452\u300d\u300cCVE-2026-8655\u300d\u306f\u3001\u30e1\u30e2\u30ea\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u3067\u3001\u4e88\u671f\u3057\u306a\u3044\u52d5\u4f5c...", "creation_timestamp": "2026-07-28T22:49:28.231492Z"}, {"uuid": "4f218d03-3bc1-462b-a7d9-269dc17c2d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqisreywc2q", "content": "Citrix\u304cNetScaler\u306e\u30d5\u30a1\u30a4\u30eb\u8aad\u307f\u53d6\u308a\u3068\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u653b\u6483\u3092\u53ef\u80fd\u306b\u3059\u308b6\u3064\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nCitrix\u306f\u706b\u66dc\u65e5\u3001 NetScaler ADC\uff08\u65e7Citrix ADC\uff09\u304a\u3088\u3073NetScaler Gateway\uff08\u65e7Citrix Gateway\uff09\u306b\u5b58\u5728\u3059\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306f\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u8aad\u307f\u53d6\u308a\u3084\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u72b6\u614b\u3092\u5f15\u304d\u8d77\u3053\u3059\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u8106\u5f31\u6027\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-8451 (CVSS\u30b9\u30b3\u30a2: 8.8) - NetScaler ADC\u307e\u305f\u306fNetScaler...", "creation_timestamp": "2026-07-28T22:52:30.708703Z"}, {"uuid": "c43f84dd-5136-40a1-8840-dcd82e9382b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqja5wtp22q", "content": "Citrix NetScaler ADC\u304a\u3088\u3073\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u30e1\u30e2\u30ea\u306e\u30aa\u30fc\u30d0\u30fc\u30ea\u30fc\u30c9\u3068\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u653b\u6483\u3092\u8a98\u767a\u3067\u304d\u308b\u3002\n\nCitrix\u306f\u3001NetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u306b\u304a\u3051\u308b\u8907\u6570\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u91cd\u8981\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u901f\u5831\u3092\u767a\u884c\u3057\u307e\u3057\u305f\u3002\n\n...\n\n\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306f\u3001CVE-2026-8451\u3001CVE-2026-8452\u3001CVE-2026-8655\u3001CVE-2026-10816\u3001CVE-2026-10817\u3001\u304a\u3088\u3073CVE-2026-13474\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-07-28T23:00:00.029186Z"}, {"uuid": "b95c4152-8085-4a99-bf3b-ade2d8502124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/cult_security/1553", "content": "\u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0437\u0430\u0441\u0432\u0435\u0442\u0438\u043b\u0438\u0441\u044c \u0441\u043e\u0442\u043d\u0438 \u0434\u044b\u0440\u044f\u0432\u044b\u0445 Citrix\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Bi.Z\u043en\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0432\u044b\u0448\u0435 200 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Citrix NetScaler, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-8451. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0435\u0449\u0451 \u0434\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0414\u044b\u0440\u0430 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 7,5 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e CVSS \u0431\u044c\u0451\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043a SAML Identity Provider. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0435\u0440\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0438\u0437 \u044d\u0442\u0438\u0445 \u0434\u0432\u0443\u0445 \u0441\u043e\u0442\u0435\u043d \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u043a\u0440\u0443\u043f\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0447\u0442\u043e \u0433\u0440\u043e\u0437\u0438\u0442 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u0430\u0440\u0430\u043b\u0438\u0447\u043e\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u041e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u043e\u0432\u043e\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u043d\u0435 \u0442\u043e\u0440\u0447\u0438\u0442 \u043b\u0438 \u0432\u0430\u0448 \u0448\u043b\u044e\u0437 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-29T00:00:35.059982Z"}, {"uuid": "15615af6-2c99-45d7-bed6-23ab13a04f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/divannyi_it/5401", "content": "BI.ZONE: \u0431\u043e\u043b\u0435\u0435 200 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439 Citrix NetScaler \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\n\n\u0412 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 Citrix NetScaler ADC \u0438 NetScaler Gateway \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8451, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438, \u0433\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043e \u043a\u0430\u043a SAML Identity Provider (IdP). \u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u043e CVSS \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5 \u0431\u0430\u043b\u043b\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 pre-auth memory overread \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u0414\u043b\u044f \u043e\u0446\u0435\u043d\u043a\u0438 \u0440\u0438\u0441\u043a\u0430 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 BI.ZONE EASM \u0443\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f CVE-2026-8451. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Citrix, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u0435\u0443\u0447\u0442\u0451\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 BI.ZONE WAF \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n#BIZONE #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437 #Citrix\n\n\ud83d\udcac MAX | \ud83d\udcac TG | \ud83d\udc99 VK |\ud83d\udd17\u0421\u0430\u0439\u0442 | \ud83d\udcdd \u0414\u0437\u0435\u043d\n\ud83c\udf81 \u0420\u043e\u0437\u044b\u0433\u0440\u044b\u0448 \u043d\u0435\u0442\u0442\u043e\u043f\u0430 iRU", "creation_timestamp": "2026-07-29T09:00:07.623700Z"}, {"uuid": "a3993e68-1983-4954-852d-016541ac2d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8451", "type": "seen", "source": "https://t.me/divannyi_it/5401", "content": "BI.ZONE: \u0431\u043e\u043b\u0435\u0435 200 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439 Citrix NetScaler \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\n\n\u0412 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 Citrix NetScaler ADC \u0438 NetScaler Gateway \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8451, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438, \u0433\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043e \u043a\u0430\u043a SAML Identity Provider (IdP). \u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u043e CVSS \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5 \u0431\u0430\u043b\u043b\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 pre-auth memory overread \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u0414\u043b\u044f \u043e\u0446\u0435\u043d\u043a\u0438 \u0440\u0438\u0441\u043a\u0430 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 BI.ZONE EASM \u0443\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f CVE-2026-8451. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Citrix, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u0435\u0443\u0447\u0442\u0451\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 BI.ZONE WAF \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n#BIZONE #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437 #Citrix\n\n\ud83d\udcac MAX | \ud83d\udcac TG | \ud83d\udc99 VK |\ud83d\udd17\u0421\u0430\u0439\u0442 | \ud83d\udcdd \u0414\u0437\u0435\u043d\n\ud83c\udf81 \u0420\u043e\u0437\u044b\u0433\u0440\u044b\u0448 \u043d\u0435\u0442\u0442\u043e\u043f\u0430 iRU", "creation_timestamp": "2026-07-30T00:02:06.735503Z"}]}