cve | cybersecurity | Threat Intelligence CVE-2026-107406: NetScaler SAML Fix Needs Another Fix By Citrix patched CVE-2026-107406, a CVSS 9.5 NetScaler SAML memory overflow. Builds that fixed last week’s exploited SAML zero-day remain vulnerable in IdP mode. Upgrade to 14.1-73.46 or 13.1-64.29.