Description
Citrix NetScaler ADC（应用程序交付控制器）和 Citrix NetScaler Gateway（安全访问网关）是思杰公司推出的企业级应用交付和安全访问解决方案，广泛应用于全球企业的数据中心、云计算环境和远程访问场景，为企业提供负载均衡、SSL VPN、应用程序防火墙等关键功能。Citrix NetScaler ADC/Gateway 在配置为 SAML 身份提供商（IdP）时存在内存越界读取漏洞，攻击者可利用该漏洞读取敏感内存信息。
Citrix NetScaler ADC SAML IDP /wsfed/passive 信息泄露漏洞（CVE-2026-3055）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300
https://nvd.nist.gov/vuln/detail/CVE-2026-3055
https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/
https://www.picussecurity.com/resource/blog/cve-2026-3055-cve-2026-4368-inside-the-netscaler-citrixbleed-3-memory-overread
https://www.crowdsec.net/vulntracking-report/cve-2026-3055-citrix-netscaler-memory-leak-exploitation
https://www.sentinelone.com/vulnerability-database/cve-2026-3055/
https://watchtowr.com/resources/rapid-reaction-to-cve-2026-3055/
https://horizon3.ai/attack-research/vulnerabilities/cve-2026-3055/
https://www.gm7.org/archives/79895