Exploit / PoCcriticalExploited in the wild

Citrix NetScaler critical flaw could leak data, update now

Security Affairsby @securityaffairsMar 24, 2026 · 12:46 UTC (Mar 24, 2026)1 min read1 · 1 read

Read at securityaffairs.com

Analyze CVE-2026-3055 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-3055 CVE-2023-4966 CVE-2026-4368

Tags: cve-2023-4966 cve-2026-3055 cve-2026-4368 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-4966	Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway	7.5	100%	KEVRansomware	Oct 10, 2023 KEV Oct 18, 2023
CVE-2026-3055	Out-of-Bounds Read in Citrix NetScaler ADC and Gateway When Used as SAML IDP	9.3	91%	KEVPoC	Mar 23, 2026 KEV Mar 30, 2026
CVE-2026-4368	Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server…	7.7	4%		Mar 23, 2026

From the original article

1 min read at securityaffairs.com

Citrix warns of a critical NetScaler flaw (CVE-2026-3055) that could leak sensitive data; users are urged to apply security updates immediately. Citrix issued security updates for two NetScaler vulnerabilities, including a critical memory overread, tracked as CVE-2026-3055 (CVSS score of 9. 3), that allows unauthenticated attackers to leak sensitive data.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.