Back Ground.News

Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks

Ground.News • March 24, 2026

Citrix has released security updates to address two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical flaw that could be exploited to leak sensitive data from the application. The vulnerabilities are listed below CVE-2026-3055 (CVSS score: 9.3) - Insufficient input validation leading to memory overread CVE-2026-4368 (CVSS score: 7.7) - Race condition leading to user

The manufacturer warns against a memory leak and possibly swapped user sessions in the security appliances. Admins should update.

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Citrix NetScaler ADC and Gateway Require Immediate Patching Cloud Software Group has identified and patched two critical vulnerabilities in Citrix NetScaler ADC and Gateway products. The vulnerabilities, tracked as CVE-2026-3055, allow unauthenticated remote attackers to exploit memory overreads and potentially leak sensitive data. Organizations using these systems are urged to apply the updates immediately to mitigate risks. The vulnerabilities were discovered during an internal review and have been addressed in a security bulletin issued on March 23, 2026. The CVSS score for CVE-2026-3055 is 9.3, indicating a high level of severity. Affected organizations should refer to Citrix Security Bulletin CTX696300 for detailed information and remediation steps. The urgency of the situation is underscored by the potential for exploitation leading to serious data breaches. Administrators are advised to prioritize these updates to protect their systems from possible attacks. 30 sources 73

Extracted Entities

Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

Platforms (2)