PT-2026-27202 · Netscaler · Adc+1

Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-3055

X.com · Rxerium

CVSS v4.0

9.3

Critical

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

🚨 CVE-2026-3055 (CVSS 9.3), a unauth memory overread vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway appliances that could see active exploitation itw

Vulnerability detection script available here: https://t.co/7Ct8oXOgCP

Patches are available as per Citrix's advisory: https://t.co/qNn3IRJXpF

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-3055

Affected Products

Adc

Gateway

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-3055 · Security Note
• https://reddit.com/r/SecOpsDaily/comments/1s1rtak/cve20263055_citrix_netscaler_adc_and_netscaler · Reddit Post
• https://twitter.com/FerroqueSystems/status/2036110812490719518 · Twitter Post
• https://twitter.com/samilaiho/status/2036104706817417613 · Twitter Post
• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300 · Note
• https://twitter.com/DefusedCyber/status/2036099443603435899 · Twitter Post
• https://twitter.com/rxerium/status/2036128669517881472 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1s1oihu/critical_vulnerabilities_in_netscaler_adc_and · Reddit Post
• https://twitter.com/DarkWebInformer/status/2036138001856680318 · Twitter Post