CVE-2026-3055

KEV

Updated Mar 31, 2026 · PUBLISHED

Description

Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.

Full record on cve.org →

Affected packages

Package	Vendor / Product	Version range	Status
ADC	NetScaler / ADC	>= 13.1, < 62.23	affected
ADC	NetScaler / ADC	>= 13.1 FIPS and NDcPP, < 37.262	affected
ADC	NetScaler / ADC	>= 14.1, < 66.59	affected
Gateway	NetScaler / Gateway	>= 13.1, < 62.23	affected
Gateway	NetScaler / Gateway	>= 14.1, < 66.59	affected