Blog & Articles Stop Trusting Vendor Severity Ratings on Perimeter Bugs by Rebecca Sutton September 3, 2026 by Rebecca Sutton September 3, 2026 Citrix called CVE-2026-8452 a memory overflow. It turned out to be an unauthenticated root exploit, and that gap says something about how patch priority gets set. FacebookTwitterLinkedinEmail