Citrix warns of actively exploited NetScaler flaw days after zero-day patch rush

Key Points:

• A high-severity vulnerability (CVE-2026-88779) has been identified in Citrix's NetScaler ADC and Gateway products, allowing for denial-of-service (DoS) attacks on affected systems.
• The vulnerability affects customer-managed deployments configured for SAML authentication, with an 8.7 CVSS score indicating significant risk to service availability but no impact on data integrity.
• Immediate actions include reviewing configurations for SAML settings and upgrading to fixed versions (14.1-73.41, 13.1-64.28, etc.) as soon as possible. Temporary mitigation is available via Global Deny List signatures for certain patched versions.

Technical Details: CVE-2026-88779 is a memory-overflow issue that requires specific configurations related to SAML authentication to be exploited effectively.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned