Research · Mar 23, 2026
Citrix NetScaler Faces Out-of-Bounds Read Vulnerability
Citrix has identified an out-of-bounds read vulnerability in its NetScaler products, potentially exposing sensitive information when configured as a SAML IDP.
What changed
An out-of-bounds read vulnerability has been discovered in Citrix NetScaler products, specifically when they are configured as a SAML Identity Provider (IDP). This flaw allows for memory overreads, which could lead to the exposure of sensitive data.
Who is affected
Organizations utilizing Citrix NetScaler products should be aware of the potential risks associated with this vulnerability. The affected products include:
- Citrix NetScaler ADC (formerly Citrix ADC)
- Citrix NetScaler Gateway (formerly Citrix Gateway)
- Citrix NetScaler ADC FIPS
- Citrix NetScaler ADC NDcPP
What to do
It is crucial for users of the affected Citrix products to assess their configurations and apply necessary security measures to mitigate risks. Regular updates and patches should be monitored closely.
- Review and update configurations for SAML IDP settings.
- Implement monitoring for unusual memory access patterns.
- Stay informed about vendor updates and patches related to this vulnerability.