CVE-2026-3055

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368 ; https://nvd.nist.gov/vuln/detail/CVE-2026-3055

Remediation deadline: April 2, 2026

Description

Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.

Timeline

Published:March 30th, 2026 12:00 AM

Last modified:March 30th, 2026 12:00 AM

Added to KEV:March 30th, 2026

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Citrix

Products

NetScaler

Weaknesses (CWE)

CWE-125

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute