Citrix patched CVE-2026-107406, a CVSS 9.5 NetScaler SAML memory overflow. Builds that fixed last week’s exploited SAML zero-day remain vulnerable in IdP mode. Upgrade to 14.1-73.46 or 13.1-64.29.
CVE-2026-88779 is an exploited Citrix NetScaler SAML flaw affecting appliances patched only days ago. Review fixed builds, CISA’s October 7 deadline, detection clues and prioritized CISO actions.
