CVE-2026-3055 NetScaler OOB memory read request eliciting oversized response leaking NSC_AAAC session cookie

Duo Tech@duotech

•updated Jul 30, 2026•0•0•8

Detects CVE-2026-3055 Citrix NetScaler out-of-bounds memory-read exploitation via a GET request eliciting an oversized HTTP response body containing a leaked NSC_AAAC session cookie.