x.comadvisoryCyber Security News (@The_Cyber_News) on X
Citrix issued emergency patches for CVE-2026-88779, a memory-overflow zero-day in NetScaler ADC/Gateway appliances configured as a SAML service provider or identity provider, rated CVSS v4.0 8.7. Citrix confirmed active, targeted exploitation against unmitigated deployments, with repeated exploitation causing denial of service and disrupting dependent authentication services.
TL;DR Citrix patches an actively exploited NetScaler SAML zero-day (CVE-2026-88779, CVSS 8.7) causing DoS via memory overflow.
CVEs named here
Technologies named here
Techniques named here
- SAML memory overflow exploitation
Related in AppSec
github.comadvisoryFlowise MCP Security Bypass Enables RCE
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
github.comrepoOASIS
blog.trailofbits.comwriteup