A critical vulnerability in Citrix NetScaler ADC and Gateway, tracked as CVE-2026-3055, is being actively exploited by attackers, posing a significant risk of sensitive data leakage due to a memory overread issue. This flaw, assigned a CVSS score of 9.3, stems from insufficient input validation, allowing unauthenticated attackers to extract sensitive information. Citrix has released security updates to address this vulnerability, along with another NetScaler flaw. The active probing of CVE-2026-3055 by attackers underscores the urgency of applying these updates to prevent potential data breaches. The vulnerability's high CVSS score and active exploitation attempts make it a pressing concern for organizations using affected NetScaler versions1. This vulnerability's disclosure expands the attack surface, making it essential for practitioners to prioritize mitigation based on their exposure and evidence of exploitation.