Sploitus

Exploit for check-cve-2026-3055-netscaler

kitploit · 2026-09-09

Exploit Code

MARKDOWN29 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-L0LSEC-CHECK-CVE-2026-3055-NETSCALER
# CVE-2026-3055 NetScaler SAML IdP check

Python helper to probe Citrix NetScaler / NetScaler Gateway appliances for CVE-2026-3055 (memory overread when acting as a **SAML Identity Provider**). Detection logic matches the public write-up from watchTowr Labs.

## Prerequisites

  * Python 3.10+
  * Only applies to appliances **configured as a SAML IdP**. Gateways without that role typically return 404 on `/saml/login`; that means **not applicable** for this CVE, not “safe from all NetScaler issues.”



## Install

root@kitploit:~
    
    
    cd check-cve-2026-3055-netscaler
    python3 -m venv .venv
    source .venv/bin/activate   # Windows: .venv\Scripts\activate
    pip install -r requirements.txt
    

## Usage

root@kitploit:~
    
    
    python check_cve_2026_3055.py --targets https://netscaler.example.com https://10.0.0.1