{"history":[{"alert":0,"cve":"CVE-2026-3055","id":23319,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.91491, \"percentile\": 0.99816}"},{"alert":0,"cve":"CVE-2026-3055","id":20799,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.91491, \"percentile\": 0.99815}"},{"alert":0,"cve":"CVE-2026-3055","id":18639,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.91491, \"percentile\": 0.99814}"},{"alert":0,"cve":"CVE-2026-3055","id":16710,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.91491, \"percentile\": 0.99814}"},{"alert":0,"cve":"CVE-2026-3055","id":14688,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.91491, \"percentile\": 0.99814}"},{"alert":0,"cve":"CVE-2026-3055","id":12473,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.91491, \"percentile\": 0.99814}"},{"alert":0,"cve":"CVE-2026-3055","id":10457,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.91491, \"percentile\": 0.99814}"},{"alert":0,"cve":"CVE-2026-3055","id":8007,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.91491, \"percentile\": 0.99813}"},{"alert":0,"cve":"CVE-2026-3055","id":5786,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.91491, \"percentile\": 0.99813}"},{"alert":1,"cve":"CVE-2026-3055","id":3875,"kind":"cna","observed_at":1793701200,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-3055\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-03-23T00:00:00+00:00\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2026-03-30\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3055\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-03-31T03:55:32.569Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"third-party-advisory\"], \"url\": \"https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/\"}, {\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3055\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-30T00:00:00.000Z\", \"value\": \"CVE-2026-3055 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"ADC\", \"vendor\": \"NetScaler\", \"versions\": [{\"lessThan\": \"66.59\", \"status\": \"affected\", \"version\": \"14.1\", \"versionType\": \"patch\"}, {\"lessThan\": \"62.23\", \"status\": \"affected\", \"version\": \"13.1\", \"versionType\": \"patch\"}, {\"lessThan\": \"37.262\", \"status\": \"affected\", \"version\": \"13.1 FIPS and NDcPP\", \"versionType\": \"patch\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Gateway\", \"vendor\": \"NetScaler\", \"versions\": [{\"lessThan\": \"66.59\", \"status\": \"affected\", \"version\": \"14.1\", \"versionType\": \"patch\"}, {\"lessThan\": \"62.23\", \"status\": \"affected\", \"version\": \"13.1\", \"versionType\": \"patch\"}]}], \"datePublic\": \"2026-03-23T19:20:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"Insufficient input validation in&nbsp;<span style=\\\"background-color: rgb(255, 255, 255);\\\">NetScaler ADC and NetScaler Gateway when<span style=\\\"background-color: rgb(255, 255, 255);\\\">&nbsp;configured as a SAML IDP&nbsp;</span>leading to<span style=\\\"background-color: rgb(255, 255, 255);\\\">&nbsp;memory overread</span></span><br>\"}], \"value\": \"Insufficient input validation in\\u00a0NetScaler ADC and NetScaler Gateway when\\u00a0configured as a SAML IDP\\u00a0leading to\\u00a0memory overread\"}], \"metrics\": [{\"cvssV4_0\": {\"Automatable\": \"NOT_DEFINED\", \"Recovery\": \"NOT_DEFINED\", \"Safety\": \"NOT_DEFINED\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"attackVector\": \"NETWORK\", \"baseScore\": 9.3, \"baseSeverity\": \"CRITICAL\", \"exploitMaturity\": \"NOT_DEFINED\", \"privilegesRequired\": \"NONE\", \"providerUrgency\": \"NOT_DEFINED\", \"subAvailabilityImpact\": \"LOW\", \"subConfidentialityImpact\": \"LOW\", \"subIntegrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L\", \"version\": \"4.0\", \"vulnAvailabilityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnIntegrityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-125\", \"description\": \"CWE-125 Out-of-bounds Read\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-03-23T20:21:27.107Z\", \"orgId\": \"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5\", \"shortName\": \"NetScaler\"}, \"references\": [{\"url\": \"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300\"}], \"source\": {\"discovery\": \"UNKNOWN\"}, \"title\": \"Insufficient input validation leading to memory overread\", \"x_generator\": {\"engine\": \"Vulnogram 0.5.0\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5\", \"assignerShortName\": \"NetScaler\", \"cveId\": \"CVE-2026-3055\", \"datePublished\": \"2026-03-23T20:21:27.107Z\", \"dateReserved\": \"2026-02-23T18:00:08.900Z\", \"dateUpdated\": \"2026-03-31T03:55:32.569Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2026-3055","id":3472,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.91491, \"percentile\": 0.99812}"},{"alert":1,"cve":"CVE-2026-3055","id":212,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2026-3055\", \"cwes\": [\"CWE-125\"], \"dateAdded\": \"2026-03-30\", \"dueDate\": \"2026-04-02\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368 ; https://nvd.nist.gov/vuln/detail/CVE-2026-3055\", \"product\": \"NetScaler\", \"requiredAction\": \"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.\", \"vendorProject\": \"Citrix\", \"vulnerabilityName\": \"Citrix NetScaler Out-of-Bounds Read Vulnerability\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","product":"ADC","vendor":"NetScaler","versions":[{"lessThan":"66.59","status":"affected","version":"14.1","versionType":"patch"},{"lessThan":"62.23","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"37.262","status":"affected","version":"13.1 FIPS and NDcPP","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"Gateway","vendor":"NetScaler","versions":[{"lessThan":"66.59","status":"affected","version":"14.1","versionType":"patch"},{"lessThan":"62.23","status":"affected","version":"13.1","versionType":"patch"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-3055","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-03-23T00:00:00+00:00","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2026-03-30","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3055"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2026-03-31T03:55:32.569Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["third-party-advisory"],"url":"https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/"},{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3055"}],"timeline":[{"lang":"en","time":"2026-03-30T00:00:00.000Z","value":"CVE-2026-3055 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"ADC","vendor":"NetScaler","versions":[{"lessThan":"66.59","status":"affected","version":"14.1","versionType":"patch"},{"lessThan":"62.23","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"37.262","status":"affected","version":"13.1 FIPS and NDcPP","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"Gateway","vendor":"NetScaler","versions":[{"lessThan":"66.59","status":"affected","version":"14.1","versionType":"patch"},{"lessThan":"62.23","status":"affected","version":"13.1","versionType":"patch"}]}],"datePublic":"2026-03-23T19:20:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Insufficient input validation in&nbsp;<span style=\"background-color: rgb(255, 255, 255);\">NetScaler ADC and NetScaler Gateway when<span style=\"background-color: rgb(255, 255, 255);\">&nbsp;configured as a SAML IDP&nbsp;</span>leading to<span style=\"background-color: rgb(255, 255, 255);\">&nbsp;memory overread</span></span><br>"}],"value":"Insufficient input validation in\u00a0NetScaler ADC and NetScaler Gateway when\u00a0configured as a SAML IDP\u00a0leading to\u00a0memory overread"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-03-23T20:21:27.107Z","orgId":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","shortName":"NetScaler"},"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300"}],"source":{"discovery":"UNKNOWN"},"title":"Insufficient input validation leading to memory overread","x_generator":{"engine":"Vulnogram 0.5.0"}}},"cveMetadata":{"assignerOrgId":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","assignerShortName":"NetScaler","cveId":"CVE-2026-3055","datePublished":"2026-03-23T20:21:27.107Z","dateReserved":"2026-02-23T18:00:08.900Z","dateUpdated":"2026-03-31T03:55:32.569Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794133200,"cve":"CVE-2026-3055","description":"Insufficient input validation in\u00a0NetScaler ADC and NetScaler Gateway when\u00a0configured as a SAML IDP\u00a0leading to\u00a0memory overread","epss":{"date":"2026-11-12","epss":0.91491,"percentile":0.99816},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2026-3055","cwes":["CWE-125"],"dateAdded":"2026-03-30","dueDate":"2026-04-02","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368 ; https://nvd.nist.gov/vuln/detail/CVE-2026-3055","product":"NetScaler","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.","vendorProject":"Citrix","vulnerabilityName":"Citrix NetScaler Out-of-Bounds Read Vulnerability"},"kev_checked":1794522003,"products":"NetScaler ADC, NetScaler Gateway","references":["https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300","https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3055"],"score":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","provider":"NetScaler","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"solutions":"","state":"PUBLISHED","title":"Insufficient input validation leading to memory overread","updated_at":1794500401,"workarounds":""},"sources":[]}