By Forkast
Publication Date: 2026-10-15 09:43:00
Analysis
CTX697191 published Oct 8, 2026: second emergency patch on Citrix NetScaler SAML in one week. CVE-2026-107406 is a Critical RCE/DoS on SAML SP/IdP appliances. The Oct 3 fix line (14.1-73.37-41) sits inside the Oct 8 affected range. No workaround. Upgrade to 14.1-73.46+ or 13.1-64.29+.
The release of CTX697191 on October 8, 2026, marks the second emergency patch for Citrix NetScaler SAML configurations. This cycle confirms a recurring operational failure: the very builds deployed to secure the appliance against the previous vulnerability are now identified as vulnerable to a more severe exploit.
The new vulnerability, CVE-2026-107406, is a critical memory overflow (CWE-119) affecting appliances configured as SAML Service Providers or Identity Providers. Unlike the previous issue, which was limited to denial of service, this vulnerability carries an impact of remote code execution or denial of service. The CVSS v4.0 score is 9.5…
