ID:12525 - Exploit for Out-of-bounds read in Citrix Netscaler ADC and Citrix NetScaler Gateway - CVE-2026-3055

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary condition in SAML IDP. A remote attacker can send a specially crafted request the appliance, trigger an out-of-bounds read error and read contents of memory on the system.

Successful exploitation of the vulnerability may lead to full system compromise. 

Remediation