Gateway — PoC Archivehttps://poc.intelseclab.com/tags/gateway/Latest proof-of-concept entries.Hugoen-usSun, 16 Aug 2026 00:00:00 +0000Citrix NetScaler ADC/Gateway -- Pre-Auth SAML PrefixList Heap Overflow to RCE (CVE-2026-8452)https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-8452-citrix-netscaler-saml-preauth-rce/Sun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-8452-citrix-netscaler-saml-preauth-rce/Critical severity (CVSS 9.8) — network · CVE-2026-8452. Status: Patched. Affects: Citrix NetScaler ADC and NetScaler Gateway. Tags: citrix, netscaler, adc, gateway, saml, heap-overflow, preauth, rce, shellcode, webshell, freebsd, xml-signature, c14n, CVE-2026-8452.networkCriticalcitrixnetscaleradcgatewaysamlheap-overflowpreauthrceshellcodewebshellfreebsdxml-signaturec14nCVE-2026-8452OpenClaw Gateway WebSocket Authentication Bypass RCE — CVE-2026-28466https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-28466-openclaw-gateway-websocket-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-28466-openclaw-gateway-websocket-rce/Critical severity — network · CVE-2026-28466. Status: Weaponized. Affects: OpenClaw gateway. Tags: openclaw, websocket, rce, gateway, auth-bypass, node-invoke, command-injection.networkCriticalopenclawwebsocketrcegatewayauth-bypassnode-invokecommand-injectionCitrix NetScaler ADC/Gateway Pre-Auth SAML Memory Overread — "CitrixBleed"-style Leak (CVE-2026-8451)https://poc.intelseclab.com/pocs/network/2026-07-03_cve-2026-8451-citrix-netscaler-memory-leak/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-03_cve-2026-8451-citrix-netscaler-memory-leak/High severity (CVSS 7.5) — network · CVE-2026-8451. Status: Incomplete PoC (memory-leak/detection primitive only — no session-hijack automation). Affects: Citrix NetScaler ADC and NetScaler Gateway. Tags: memory-disclosure, SAML, Citrix, NetScaler, ADC, Gateway, citrixbleed, unauthenticated, active-exploitation.networkHighmemory-disclosureSAMLCitrixNetScalerADCGatewaycitrixbleedunauthenticatedactive-exploitationCitrix NetScaler CitrixBleed 2 Session Token Disclosure (CVE-2025-5777)https://poc.intelseclab.com/pocs/web/2026-05-16_citrixbleed-2-session-token-disclosure/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-16_citrixbleed-2-session-token-disclosure/Critical severity (CVSS 9.3) — web · CVE-2025-5777. Status: Weaponized. Affects: Citrix NetScaler ADC / NetScaler Gateway login interface. Tags: citrixbleed2, memory-disclosure, session-hijack, NetScaler, Gateway, unauthenticated.webCriticalcitrixbleed2memory-disclosuresession-hijackNetScalerGatewayunauthenticated