Hackers Circle Citrix NetScaler Flaw Within Hours of Disclosure

A critical Citrix NetScaler vulnerability (CVE-2026-3055, CVSS 9.3) permits an unauthenticated memory overread on appliances configured as a SAML Identity Provider; threat actors were observed conducting active reconnaissance to identify susceptible SAML IDP deployments. The advisory (CTX696300) lists affected versions, configuration checks (e.g., Add authentication samlIdPProfile), a secondary flaw CVE-2026-4368, and urges immediate upgrades to specified patched releases while noting cloud-managed services are updated automatically.