CyberSIXT Search
Original

CISA

CISA Adds CVE-2026-3055 to Known Exploited Vulnerabilities Catalogue

Part of the CVE-2026-3055 story · 15 articles · 8 outlets · since 23 Mar

According to CISA, the Known Exploited Vulnerabilities (KEV) Catalog currently lists CVE-2026-3055 under Citrix NetScaler as an out-of-bounds reads vulnerability in Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP when configured as a SAML IDP, which can lead to a memory overread.

The entry notes that the vulnerability is associated with Citrix NetScaler products and provides related references to vendor guidance and the NVD page for further detail. Date Added is 30 March 2026 with a Due Date of 2 April 2026. Known to be used in ransomware campaigns? claims to be Unknown. Action: apply mitigations per vendor instructions, follow applicable guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Story timeline CVE-2026-3055

Full timeline
Show as table
CVE-2026-3055 coverage
Published (UTC)OutletHeadline
Mon 23 Mar · 21:23 UTCRapid7CVE-2026-3055: Citrix NetScaler ADC and NetScaler Gateway Out-of-Bounds Read
Tue 24 Mar · 07:35 UTCThe Hacker NewsCitrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks
Tue 24 Mar · 11:41 UTCSecurityWeekCritical Citrix NetScaler Vulnerability Poised for Exploitation, Security Firms Warn
Tue 24 Mar · 13:48 UTCSecurity AffairsCitrix NetScaler critical flaw could leak data, update now
Tue 24 Mar · 14:52 UTCSOCRadarCVE-2026-3055: NetScaler Memory Disclosure Puts SAML-Enabled Edge Devices at Risk
Tue 24 Mar · 15:22 UTCInfosecurityCitrix Urges Immediate Patching for Critical NetScaler Vulnerabilities
Sat 28 Mar · 10:15 UTCThe Hacker NewsCitrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug
Sun 29 Mar · 14:04 UTCSecurity AffairsUrgent Alert: NetScaler bug CVE-2026-3055 probed by attackers could leak sensitive data
Mon 30 Mar · 09:33 UTCSecurityWeekExploitation of Fresh Citrix NetScaler Vulnerability Begins
Mon 30 Mar · 11:43 UTCInfosecurityCritical Citrix NetScaler Vulnerability Exploited in the Wild
Mon 30 Mar · 14:22 UTCThe Hacker News⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More
Mon 30 Mar · 20:30 UTCCISACISA Adds CVE-2026-3055 to Known Exploited Vulnerabilities Catalogue
Mon 30 Mar · 20:47 UTCCISACISA Adds One Known Exploited Vulnerability to Catalog
Mon 30 Mar · 21:51 UTCCISACISA Adds CVE-2026-3055 to Known Exploited Vulnerabilities Catalogue (this article)
Tue 31 Mar · 10:13 UTCSecurity AffairsU.S. CISA adds a flaw in Citrix NetScaler to its Known Exploited Vulnerabilities catalog

Sources

Original articlecisa.govPrimary sourcesupport.citrix.com

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device