Research · Mar 23, 2026 · ZeroDay Catalog
Out-of-Bounds Read Vulnerability in Citrix NetScaler Products
A newly discovered out-of-bounds read vulnerability in Citrix NetScaler products could lead to memory overreads when configured as a SAML IDP.
What changed
An out-of-bounds read vulnerability has been identified in Citrix NetScaler products, specifically affecting configurations as a SAML Identity Provider (IDP). This vulnerability can lead to potential memory overreads, which may expose sensitive information.
Who is affected
Several Citrix products are impacted by this vulnerability, particularly those configured as SAML IDPs. Organizations utilizing these products should be aware of the potential risks.
The following products are affected:
- Citrix NetScaler ADC (formerly Citrix ADC)
- NetScaler Gateway (formerly Citrix Gateway)
- NetScaler ADC FIPS
- NetScaler ADC NDcPP
What to do
Organizations using the affected Citrix NetScaler products should assess their configurations and implement necessary security measures to mitigate the risk associated with this vulnerability. Regular monitoring and updates are recommended to ensure continued protection.
It is advisable to stay informed about any patches or updates released by Citrix addressing this vulnerability.