Critical Citrix NetScaler Vulnerability Exploited in the Wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-3055 | Out-of-Bounds Read in Citrix NetScaler ADC and Gateway When Used as SAML IDP | 9.3 | 91% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 14.1.60.52 | cPP Additionally, NetScaler introduced a new feature in its 14.1.60.52 version, called ‘Global Deny List.’ This feature provides a |
From the original article
3 min read at infosecurity-magazine.com
A critical vulnerability in Citrix’s networking and security solutions is being exploited in the wild, security researchers have confirmed. The vulnerability, disclosed by Citrix as CVE-2026-3055 on March 23, is a critical out-of-bounds read in NetScaler Application Delivery Controller (ADC) and NetScaler Gateway with a critical CVSS v4. 0 score of 9.
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.