By Eswar
Publication Date: 2026-10-03 05:51:00
Citrix NetScaler administrators report repeated appliance crashes and forced reboots after deploying emergency updates for recently disclosed zero-day vulnerabilities, with the disruption now linked to a newly observed issue affecting SAML authentication deployments.
The reports involve internet-facing NetScaler ADC and Gateway systems running patched releases, including version 14.1-73.37, which Citrix previously designated as a fixed build for the actively exploited zero-days.
Multiple administrators said crafted, malicious, or malformed SAML-related requests appeared to crash the nsaaad authentication service. On affected systems, repeated daemon failures can trigger high-availability failovers or cause the appliance watchdog, known as pitboss, to restart the entire device after a crash threshold is reached.
Citrix NetScaler Appliances Reboot
Community reports describe several instances entering unexpected reboot cycles after vulnerability scanning or suspicious…
