VULNERABILITY INTELLIGENCE
CVE-2026-3055
CVSS score9.8 CRITICAL
EPSS probability91.49%
CISA KEVKnown exploited vulnerability
Published2026-03-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Citrix NetScaler Out-of-Bounds Read Vulnerability
Vendor / product: Citrix / NetScaler
Description
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
Weakness classification
- 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5: CWE-125
Primary references
- 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5 — Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource