CVE-2026-3055

🔥 NetScalerBleed2: Citrix NetScaler의 치명적인 인증 없이 발생하는 메모리 초과 읽기 CVE-2026-3055 인증되지 않은 범위 밖 메모리 읽기메모리 누수 SAML ID 제공자IdP로 구성된 어플라이언스에서만 발생 📋 개요 CVE-2026-3055 는 Citrix NetScaler ADC 및 NetScaler Gateway 의 치명적인 범위 밖 읽기 취약점CWE-125입니다. 이 취약점은 SAML 처리 중 불충분한 입력 검증 으로 인해 발생합니다. 인증되지 않은 원격 공격자가 메모리 초과 읽기를...

check-cve-2026-3055-netscaler

CVE-2026-3055 NetScaler SAML IdP チェック Citrix NetScaler / NetScaler Gateway アプライアンスが CVE-2026-3055（SAML Identity Provider として動作する際のメモリ過剰読み取り）に該当するかを調査するための Python ヘルパーです。検出ロジックは watchTowr Labs の公開記事に準拠しています。 前提条件 Python 3.10+ SAML IdP として構成されている アプライアンスにのみ適用されます。その役割を持たないゲートウェイは通常 /saml/login に対して...

PT-2026-108214

Name of the Vulnerable Software and Affected Versions NetScaler ADC and NetScaler Gateway versions prior to 14.1-73.37 NetScaler ADC 14.1-FIPS versions prior to 14.1-73.37 FIPS NetScaler ADC and NetScaler Gateway versions prior to 13.1-64.23 NetScaler ADC 13.1-FIPS versions prior to 13.1-NDcPP...

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779 , carries a CVSS score of 8.7 out of 10.0. "CVE-2026-88779 is a memory overflow...

CVE-2026-84668

The Jenkins SAML Plugin (versions 4.618.v441a_27fa_46d2 and earlier) is vulnerable to an improper access control issue due to Stapler data binding . The vulnerability exists because the plugin uses the @DataBoundConstructor annotation on a constructor that writes the SAML identity provider metada...

CVE-2026-55789 Logto: SAML IdP injects user-controlled profile attributes raw into signed assertions, allowing privilege escalation at relying Service Providers

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's self-hosted SAML application IdP built the signed SAML response and assertion by string-substituting user-controlled profile attributes such as name, email, and custom attribute-mapping values into...

CVE-2026-55789 Logto: SAML IdP injects user-controlled profile attributes raw into signed assertions, allowing privilege escalation at relying Service Providers

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's self-hosted SAML application IdP built the signed SAML response and assertion by string-substituting user-controlled profile attributes such as name, email, and custom attribute-mapping values into...

NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX696604)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is version 13.1 prior to 13.1-63.18, 14.1 prior to 14.1-72.61, 13.1-FIPS/NDcPP prior to 13.1-37.272, or 14.1-FIPS prior to 14.1-72.61. It is, therefore, affected by multiple vulnerabilities: -...

VulnCheck KEV: CVE-2026-8451

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP...

CVE-2026-8451 Insufficient input validation leading to memory overread

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP...

CVE-2026-8451

CVE-2026-8451 is a memory overread vulnerability in Citrix NetScaler ADC and NetScaler Gateway when configured as a SAML IdP. The issue arises from insufficient input validation, related to the /saml/login path, enabling an unauthenticated attacker to read memory and potentially leak sensitive da...

CVE-2026-8451 Insufficient input validation leading to memory overread

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP...

CVE-2026-41669

Admidio is an open-source user management solution. Prior to version 5.0.9, the Admidio SAML Identity Provider implementation discards the return value of its validateSignature method at both call sites handleSSORequest line 418 and handleSLORequest line 613. The method returns error strings on...

CVE-2026-41669: Improper Verification of Cryptographic Signature

Admidio is an open-source user management solution. Prior to version 5.0.9, the Admidio SAML Identity Provider implementation discards the return value of its validateSignature method at both call sites handleSSORequest line 418 and handleSLORequest line 613. The method returns error strings on...

PT-2026-36106

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.9 Description The SAML Identity Provider implementation fails to properly handle the return value of the validateSignature function. This function returns error strings upon failure instead of throwing exceptions,...

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

CVE-2026-3055 - Security Vulnerability Severity: N/A CV...

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

🔓 CVE-2026-3055 - Citrix NetScaler Memory Overread Exploit !...

⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More

Some weeks are loud. This one was quieter but not in a good way. Long-running operations are finally hitting courtrooms, old attack methods are showing up in new places, and research that stopped being theoretical right around the time defenders stopped paying attention. There's a bit of everythi...

Citrix NetScaler Out-of-Bounds Read Vulnerability

Citrix NetScaler ADC formerly Citrix ADC, NetScaler Gateway formerly Citrix Gateway and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread...

VulnCheck KEV: CVE-2026-3055

Citrix NetScaler ADC formerly Citrix ADC, NetScaler Gateway formerly Citrix Gateway and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread...