CVE-2026-3055Vulnerability
Citrix NetScaler Out-of-Bounds Read Vulnerability
Reported by 3 independent sources · first reported by watchTowr Labs · last reported
Last reported 1 month ago
Fix due 2 Apr 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 90% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
6 reports, newest first · the exact sentence from each-
August 2026 CVE Landscape“CVE-2026-3055”
-
July 2026 CVE Landscape“CVE-2026-3055”
-
Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits“CVE-2026-3055 (CVSS rating: 9.8): Citrix NetScaler ADC & Gateway vulnerability with manual active exploitation (data exfiltrated)”
-
CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)“The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)”
-
Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2)“Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2)”
-
The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)“The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)”
Indicators reported together
named in the same reports- asdf[.]idin 2 reports
Copy this indicator · defanged
Also named with it: CVE-2026-33824, CVE-2026-34486, CVE-2026-39987, CVE-2025-49113, CVE-2026-0300, CVE-2026-33017, CVE-2026-63030, CVE-2021-3156, CVE-2021-29441, CVE-2026-12569, CVE-2026-3395, CVE-2025-68613, CVE-2026-21858, CVE-2026-68820, CVE-2026-65400, CVE-2026-60004, CVE-2026-64849, CVE-2024-42009, CVE-2025-5777
Thanks — we review every report.