CVE-2026-3055

This vulnerability lets a remote attacker trick your SAML login component into reading memory it shouldn’t. That can either reveal sensitive information (like parts of sessions or internal data) or crash the system so users can’t sign in. It matters most if your Citrix ADC / NetScaler Gateway is actively used as your organization’s SAML IDP (the system that other apps trust for logins).

This matters if you use Citrix ADC / NetScaler Gateway for authentication and have configured it as a SAML IDP. The flaw is reachable over the network and does not require an attacker to have a login. It’s a risk when the vulnerable SAML IDP configuration is reachable from the attacker’s network path (for example, via internet-facing access).

This is a RED issue because CISA added it to the Known Exploited Vulnerabilities list, meaning it’s being treated as actively risky in real environments. The practical impact includes data exposure and service crashes, and the affected setup is often internet-facing due to authentication traffic. The CISA remediation due date is 2026-04-02.