Post
Fran Donoso
francisck.com
did:plc:svsqyeqx3qdvygn2getltemf
A *new* SAML RCE for Citrix is out.
The new vulnerability (CVE-2026-107406) is only applicable if you're running your NetScaler deployment as a SAML *Identity Provider*.
If you’re using Citrix as a service provider & patched last weekend you’re ok.
Surely the madness will stop someday. Right?
2026-10-08T21:23:10.067Z