Citrix has shipped emergency patches for CVE-2026-88779, a SAML-related denial-of-service bug in NetScaler that attackers were already exploiting before a fix existed. Researchers are still investigating whether the same flaw could be chained into something worse than a crash, such as remote code execution. Anyone running NetScaler ADC or Gateway should apply the update immediately given the active exploitation.
// source: bleepingcomputer.com ↗