Citrix NetScaler Memory Overread Vulnerability

FortiGuard telemetry reports persistent, widespread exploitation attempts against Citrix NetScaler ADC/Gateway appliances via CVE-2026-3055, a critical (CVSS 9.3) SAML processing memory overread that can expose session data and credentials; sensors observed thousands of blocked attacks per day targeting internet-facing SAML IdP deployments across multiple sectors and countries, and the issue has been added to the CISA KEV catalog, leaving unpatched systems at high risk of credential exposure and unauthorized access.