x.comadvisoryEMITS (@emits_ca) on X
CVE-2026-107406 is a memory overflow in Citrix NetScaler that allows remote code execution when SAML is configured, rated 9.5 out of 10. The post from emits.ca calls it the fourth NetScaler bulletin in a week. It warns that the previous week's SAML patch does not cover it, and that fixes need NetScaler 14.1-73.46 or later, or 13.1-64.29 or later. The full advisory is on emits.ca.
TL;DR Flags a critical NetScaler SAML memory overflow RCE that last week's patch misses, fixed in 14.1-73.46+ and 13.1-64.29+.
CVEs named here
Technologies named here
- NetScaler with SAML configured
- Citrix NetScaler
Related in Cloud & Infra
orca.securityarticleOrca Security: GenAI Risks in Cloud Environments
.png)
aikido.devwriteupGoogle API keys keep working after you delete them
attackthesoc.comarticle