VulnerabilitycriticalExploited in the wild

Critical NetScaler ADC, Gateway flaw may soon be exploited (CVE-2026-3055)

Help Net Securityby @zeljkazorzMar 31, 2026 · 08:50 UTC (Mar 31, 2026)2 min read1

Read at helpnetsecurity.com

Analyze CVE-2026-3055 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-3055 CVE-2026-4368 CVE-2025-5777

Tags: cve-2025-5777 cve-2026-3055 cve-2026-4368 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-5777	Out-of-Bounds Read (Memory Overread) in Citrix NetScaler ADC and Gateway	9.3	100%	KEVRansomware	Jun 17, 2025 KEV Jul 10, 2025
CVE-2026-3055	Out-of-Bounds Read in Citrix NetScaler ADC and Gateway When Used as SAML IDP	9.3	91%	KEVPoC	Mar 23, 2026 KEV Mar 30, 2026
CVE-2026-4368	Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server…	7.7	4%		Mar 23, 2026

From the original article

2 min read at helpnetsecurity.com

Citrix has fixed two vulnerabilities in NetScaler ADC and NetScaler Gateway, with the more serious flaw (CVE-2026-3055) potentially allowing attackers to extract active session tokens from the memory of affected devices.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.