Out-of-bounds read in Citrix Netscaler Gateway
CVSS Skor
9.8
EPSS İhtimal
%4.0
Risk Skoru
0.8
Yayın
6 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Nuclei: Citrix NetScaler SAML IDP - Memory Overread
Exploit funcional para CVE-2026-3055 en Citrix NetScaler ADC y Gateway. Aprovecha memory overread en endpoint /wsfed/passive?wctx para filtrar memoria del sistema, extrayendo session IDs administrativas, cookies y datos sensibles que permiten hijacking de sesiones y compromiso total del appliance vulnerable.
Herramienta de detección para CVE-2026-3055 que identifica NetScaler ADC y Gateway vulnerables a memory overread. Realiza escaneo individual, por red o lista de hosts, detecta memory leak en /wsfed/passive?wctx, extrae session IDs, verifica versiones y genera reportes JSON, HTML o CSV con hosts vulnerables.
Low-impact probe for Citrix NetScaler CVE-2026-3055 (SAML IdP memory overread)
https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/
İlgili Benzer Açıklar
Vulnerability in N/a
Code injection in Citrix NetScaler ADC
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
Memory buffer overflow in Citrix Netscaler Gateway
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
Vulnerability in N/a
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-3055"