{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata — refreshed continuously.","feed_url":"https://feed.craftedsignal.io/tags/memory-overread/","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cves":[],"_cs_exploited":false,"_cs_products":[],"_cs_severities":["critical"],"_cs_tags":["citrix","netscaler","cve-2026-3055","memory-overread","information-disclosure"],"_cs_type":"threat","_cs_vendors":[],"content_html":"\u003cp\u003eA critical vulnerability, CVE-2026-3055, impacts Citrix NetScaler ADC and NetScaler Gateway appliances configured as SAML identity providers (IDP). Disclosed on March 23, 2026, and actively exploited since at least March 27, 2026, this flaw allows attackers to perform memory overreads via the \u003ccode\u003e/saml/login\u003c/code\u003e and \u003ccode\u003e/wsfed/passive\u003c/code\u003e endpoints. Successful exploitation enables the extraction of sensitive information, including authenticated administrative session IDs. The vulnerability affects versions…\u003c/p\u003e\n","date_modified":"2026-03-31T12:00:00Z","date_published":"2026-03-31T12:00:00Z","id":"/briefs/2026-03-citrix-netscaler-cve-2026-3055/","summary":"Threat actors are actively exploiting CVE-2026-3055, a critical memory overread vulnerability in Citrix NetScaler ADC and NetScaler Gateway appliances configured as a SAML identity provider (IDP), to extract sensitive information, including authenticated administrative session IDs, potentially leading to full system takeover.","title":"Citrix NetScaler ADC and Gateway CVE-2026-3055 Exploitation","url":"https://feed.craftedsignal.io/briefs/2026-03-citrix-netscaler-cve-2026-3055/"}],"language":"en","title":"CraftedSignal Threat Feed — Memory-Overread","version":"https://jsonfeed.org/version/1.1"}