Citrix NetScaler Memory Overread (CVE-2026-3055)
Description
Citrix NetScaler ADC and NetScaler Gateway contain an insufficient input validation vulnerability when configured as a SAML Identity Provider (IDP). The flaw allows unauthenticated attackers to trigger a memory overread by sending a crafted SAML authentication request to the /saml/login endpoint. Successful exploitation can expose sensitive in-memory data or destabilize the appliance.
Remediation
Update Citrix NetScaler ADC and NetScaler Gateway to the latest patched version. As a workaround, restrict access to the vulnerable endpoint WAF rules. Review application logs for indicators of exploitation.