Citrix Urges Patching Critical Net Scaler Flaw Allowing Unauthenticated Data Leaks
Summary: Citrix released security updates for two NetScaler ADC and NetScaler Gateway vulnerabilities, including CVE-2026-3055, an out-of-bounds read that Rapid7 says unauthenticated remote attackers could exploit to leak sensitive memory data, though only when the appliance is configured as a SAML Identity Provider. The flaws affect NetScaler ADC and Gateway versions 14.1 before 14.1-66.59 and 13.1 before 13.1-62.23, plus NetScaler ADC 13.1-FIPS and 13.1-NDcPP before 13.1-37.262, and Citrix says there is no evidence of exploitation in the wild.
What you should know: NetScaler flaws have been exploited repeatedly before - Citrix Bleed (CVE-2023-4966), Citrix Bleed 2 (CVE-2025-5777), CVE-2025-6543 and CVE-2025-7775 - and watchTowr's Benjamin Harris calls imminent exploitation of this one highly likely, so the appliances that gave attackers initial access before are the same ones sitting unpatched now.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-4966CVE-2025-5777CVE-2025-6543CVE-2025-7775CVE-2026-3055CVE-2026-4368
- Related
- CVE-2026-3055: Citrix Net Scaler Out-of-Bounds Read Vulnerability Known Exploited Vulnerabilities · Mar 30, 2026