CVE-2026-3055

Analyzed
Published: 23 Mar 2026, 20:21
Last modified:31 Mar 2026, 03:55

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
v3.1 (nvd)
EPSS Score
36.74% HIGH
37% probability +36.72%
KEV
Listed
CISA
1 listing
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

23 Mar 2026, 20:21
Published
Vulnerability first disclosed
30 Mar 2026, 00:00
Added to CISA KEV
Citrix NetScaler Out-of-Bounds Read Vulnerability
31 Mar 2026, 03:55
Last Modified
Vulnerability information updated
02 Apr 2026, 00:00
CISA Remediation Due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

CVSS Metrics

  • v4.0•CRITICAL•Score: 9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
  • v4.0•CRITICAL•Score: 9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 36.74%• Percentile: 97%

Techniques & Countermeasures

  • CWE-125•Out-of-bounds Read

    The product reads data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • citrix•netscaler_application_delivery_controller

    ≥ 13.1, < 13.1-37.262 | ≥ 13.1, < 13.1-62.23 | ≥ 14.1, < 14.1-60.58

  • citrix•netscaler_gateway

    ≥ 13.1, < 13.1-62.23 | ≥ 14.1, < 14.1-60.58

  • netscaler•adc

    ≥ 14.1, < 66.59 | ≥ 13.1, < 62.23 | ≥ 13.1 FIPS and NDcPP, < 37.262

  • netscaler•gateway

    ≥ 14.1, < 66.59 | ≥ 13.1, < 62.23

References (3)