Description
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
NetScaler ADC
Default version status: unaffected
14.1 to < 66.59affected13.1 to < 62.23affected13.1 FIPS and NDcPP to < 37.262affected
NetScaler Gateway
Default version status: unaffected
14.1 to < 66.59affected13.1 to < 62.23affected
References
- https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300 ↗
- https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/ ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3055 ↗