Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-3055

Insufficient input validation leading to memory overread

Description

Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetScaler ADC

Default version status: unaffected

  • 14.1 to < 66.59affected
  • 13.1 to < 62.23affected
  • 13.1 FIPS and NDcPP to < 37.262affected

NetScaler Gateway

Default version status: unaffected

  • 14.1 to < 66.59affected
  • 13.1 to < 62.23affected

References