Citrix Calls It a DoS. Researchers Call It Pre-Auth RCE. Your NetScaler Is on KEV Either Way
CVE-2026-8452 is a Citrix NetScaler flaw the vendor rated as high-severity DoS, but watchTowr Labs demonstrated unauthenticated RCE. CISA added it to KEV Aug 26 with a Saturday due date.