
- CISA adds Citrix CVE‑2026‑3055 to Known Exploited Vulnerabilities catalog, confirming in‑the‑wild abuse
- Critical input validation flaw in NetScaler ADC/Gateway SAML IDP enables memory overread and data access
- Exploitation observed since March 27; ~30K NetScaler and 2K Gateway instances exposed, agencies must patch by April 2