Citrix has patched two vulnerabilities affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions, one of which is very similar to the CitrixBleed and CitrixBleed2 flaws exploited in zero-day attacks in recent years. The critical security bug (tracked as CVE-2026-3055) stems from insufficient input validation, which can lead to a memory overread on Citrix ADC or Citrix Gateway appliances configured as a SAML identity provider (IDP), potentially enabling remote attackers without privileges to steal sensitive information such as session tokens. "Cloud Software Group strongly urges affected customers of NetScaler ADC and NetScaler Gateway to install the relevant updated versions as soon as possible," the company warned in a Monday advisory. Citrix has also shared detailed guidance on how to identify and patch NetScaler instances vulnerable to CVE-2026-3055. The company also patched the CVE-2026-4368 vulnerability affecting appliances configured as Gateways (SSL VPN, ICA Proxy, CVPN, RDP proxy) or AAA virtual servers, which can enable threat actors with low privileges on the targeted system to exploit a race condition in low-complexity attacks, potentially leading to user session mix-ups. The two flaws affect NetScaler ADC and NetScaler Gateway versions 13.1 and 14.1 (fixed in 13.1-62.23 and 14.1-66.59) and NetScaler ADC 13.1-FIPS and 13.1-NDcPP (addressed in 13.1-37.262). Internet security watchdog group Shadowserver is currently tracking...
Citrix urges admins to patch NetScaler flaws as soon as possible
BleepingComputer
·Sergiu Gatlan
·Published Mar 25, 2026
·Updated
Affected Software
2 affected components
Citrix NetScaler ADC=13.1, =14.1, =13.1-FIPS, =13.1-NDcPP
Citrix NetScaler Gateway=13.1, =14.1
Frequently Asked Questions
1
What is the main topic of this article?
The article discusses Citrix urging administrators to patch vulnerabilities in NetScaler ADC and NetScaler Gateway appliances.
2
What vulnerabilities are highlighted in the article?
The article highlights two serious vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway, one of which is similar to previously exploited CitrixBleed flaws.
3
What versions of Citrix products are affected by the vulnerabilities?
Affected versions include Citrix NetScaler ADC 13.1, 14.1, and Citrix NetScaler Gateway 13.1, 14.1.
4
What are the potential risks of not patching these vulnerabilities?
Not patching these vulnerabilities can expose systems to potential exploitation and security breaches.
5
How should administrators respond to these security issues?
Administrators are advised to patch their NetScaler appliances as soon as possible to mitigate the risks.