{"uuid": "54282751-d509-44a0-8e91-1bf439226005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107406", "type": "seen", "source": "https://bsky.app/profile/francisck.com/post/3mxfffdzhqs2q", "content": "A *new* SAML RCE for Citrix is out. \n\nThe new vulnerability (CVE-2026-107406) is only applicable if you're running your NetScaler deployment as a SAML *Identity Provider*. \n\nIf you\u2019re using Citrix as a service provider &amp;  patched last weekend you\u2019re ok.\n\nSurely the madness will stop someday. Right?", "creation_timestamp": "2026-10-08T21:23:10.634598Z"}