high·Misconfiguration·Updated Mar 30, 2026

Citrix NetScaler SAML IDP - Memory Overread

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsdomain, subdomain, ipv4

CostFree

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

🔴

CISA Known Exploited Vulnerability

This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.

9.3

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

ADCby NetScaler

AFFECTED< 66.59→SAFE ✓≥ 66.59

Gatewayby NetScaler

AFFECTED< 66.59→SAFE ✓≥ 66.59

Updated Nov 10, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.