By https://www.facebook.com/Guenter.Born
Publication Date: 2026-10-04 16:01:00
[English]After the patch is before the patch. The CVE-2026-88779 vulnerability I suspected on October 3, 2026 was confirmed in Citrix NetScaler ADC and Citrix Gateway. Since October 4, 2026, security updates have been available to protect against this vulnerability. Administrators should patch the appliances in a timely manner.
Confirmation of the SAML problem
A few days ago, I received reports that there were attacks on the Netscaper ADC instances patched on September 27, 2026, which currently still led to “crashes”. I had in the blog post Citrix NetScaler ADC: New SAML authentication issue? (3.10.2026) referred to the subject. Citrix had indicated that an issue was being investigated.
A few hours ago, I received the above tweet confirming the CVE-2026-88779 vulnerability in Citrix NetScaler ADC and Citrix Gateway.
Citrix Vulnerability CVE-2026-88779 patching
As of 4 October 2026, the precautionary statement: Citrix NetScaler ADC and Citrix…
