Tag

#pre-auth

1 post tagged #pre-auth.

Analysis · May 17, 2026 · Colten Anderson

Three CitrixBleeds in 30 months is not a streak, it is a code surface

CVE-2026-3055 is the third pre-auth memory disclosure in NetScaler's authentication stack in 30 months. Citrix says they are unrelated. The endpoints, the class, and the exploitation tempo say otherwise.