This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Citrix NetScaler ADC and NetScaler Gateway fix 2 vulnerabilities
Citrix fixes 2 vulnerabilities in various products [1]. Individual products and their fixes: NetScaler ADC and NetScaler Gateway - 14.1-60.58, 14.1-66.59, 13.1-62.23 [1] NetScaler ADC FIPS and NDcPP - 13.1-37.262 [1]
Allows an unauthenticated remote attacker, due to insufficient input validation, to obtain sensitive information from the device's memory if NetScaler ADC or NetScaler Gateway is configured as a SAML Identity Provider [1]
The vulnerability is present in products:
- NetScaler ADC; >=14.1, <14.1-60.58; >=13.1, <13.1-62.23
- NetScaler Gateway; >=14.1, <14.1-60.58; >=13.1, <13.1-62.23
- NetScaler ADC FIPS; <13.1-37.262
- NetScaler ADC NDcPP; <13.1-37.262
CVSS: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
More information:
- CVE-2026-3055 at cve.org, NVD
- CWE-125: Out-of-bounds Read at cwe.mitre.org
The vulnerability was publicly disclosed 23. 3. 2026.
Allows an unauthenticated remote attacker, due to a race condition, to cause a mix-up of user sessions and gain access to another user's session if NetScaler ADC or NetScaler Gateway is configured as a Gateway or AAA server [1].
The vulnerability is present in products:
- NetScaler ADC; =14.1-66.54
- NetScaler Gateway; =14.1-66.54
CVSS: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
More information:
- CVE-2026-4368 at cve.org, NVD
- CWE-362: Race Condition at cwe.mitre.org
The vulnerability was publicly disclosed 23. 3. 2026.
By CESNET, z.s.p.o. Michaela Jarošová on 30. 3. 2026.