🚨 Attackers are probing Citrix NetScaler for CVE-2026-3055 (CVSS 9.3).
Honeypots show requests to /cgi/GetAuthMethods to identify SAML IdP setups, which are required for exploitation.
🔗 How attackers are mapping vulnerable NetScaler targets → https://t.co/R4Y0bKvNJU
— The Hacker News (@TheHackersNews) March 28, 2026