Sploitus

CVE-2026-3055

12 known exploits for CVE-2026-3055

Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

Affected products
Netscaler Adc, Netscaler Gateway
Citrix Netscaler Application Delivery Controller
< 13.1-37.262, 13.1-62.23, 14.1-60.58
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
87.2% (100th percentile)
Weakness
CWE-125
NVD status
Analyzed
Published
2026-03-23
CVE-2026-3055 at NVD
Authoritative description, scoring and affected products

12 known exploits for CVE-2026-3055

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC
2026-09-10 KitPloitKITPLOIT
CVE-2026-3055
2026-09-10 KitPloitKITPLOIT
check-cve-2026-3055-netscaler
2026-09-09 KitPloitKITPLOIT
CVE-2026-3055-Scanner---Herramienta-de-Detecci-n
2026-09-09 KitPloitKITPLOIT
CVE-2026-3055
2026-09-09 KitPloitKITPLOIT
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
2026-04-19 NetVanguard-cmdGITHUB
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
2026-04-01 l0lsecGITHUB
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
2026-03-31 fevar54GITHUB
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
2026-03-31 fevar54GITHUB
Exploit for CVE-2026-3055
2026-03-27 RootAidGITHUB
CVE-2026-3055
2026-03-23 NetScalerUNKNOWN
Citrix ADC (NetScaler) CVE-2026-3055 Scanner
2026-03-23 watchTowr, sfewer-r7METASPLOITRuby