high
CISA KEV
CVE-2026-3055
Citrix NetScaler Out-of-Bounds Read Vulnerability
// Description
Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.
// Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Federal remediation due Apr 2, 2026 — past due
Advertisement
// Coverage
- CVE-2026-3055: Citrix NetScaler Out-of-Bounds Read Under Active Exploitation
Mar 30, 2026
- CVE-2026-3055: Critical Citrix NetScaler Memory Flaw Exploited
Mar 30, 2026
- Citrix NetScaler CVE-2026-3055 Memory Overread — Mitigation Guide
Mar 28, 2026
- Citrix NetScaler CVE-2026-3055: Critical Data Leak Patch Guidance
Mar 24, 2026