Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

This Citrix NetScaler ADC and NetScaler Gateway vulnerability should be remediated as soon as possible. Exploitation attempts have been reported.

This Citrix NetScaler ADC and NetScaler Gateway vulnerability should be remediated as soon as possible. No current exploitation activity has been reported.

Citrix Netscaler / Gateway ADC 13.1.x < 13.1-37.262 / 14.1-x < 14.1-60.58 and ADC (FIPS/NDcPP) < 13.1-37.262 are vulnerable to a memory leak vulnerability when configured as a SAML IDP. An unauthenticated attacker can exploit this vulnerability by sending specially crafted requests to the vulnerable system, which can lead to a memory leak.

The remote NetScaler ADC (formerly Citrix ADC) or NetScaler Gateway (formerly Citrix Gateway) device is version 14.1 prior to 14.1-60.58, 13.1 prior to 13.1-62.23, or 13.1-FIPS/NDcPP prior to 13.1-37.262. It is, therefore, affected by a vulnerability:

  - Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP     leading to memory overread. (CVE-2026-3055)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
115201	Citrix Netscaler / Gateway ADC Memory Leak	Web App Scanning	Component Vulnerability	Check Based	critical
303800	NetScaler ADC and NetScaler Gateway Memory Overread (CTX696300 / CVE-2026-3055)	Nessus	CGI abuses	Combined	critical

Detections

Analytics

CVE-2026-3055

critical

Tenable Plugins

critical

critical