Citrix have a blog out for #PitScaler 2
It’s a new security vuln, zero day. You can spam SAML requests and pitboss will execute commands again.
https://community.citrix.com/techzone-blogs/110_security-updates/security-update-guidance-for-netscaler-saml-authentication-deployments/
Kevin Beaumont
npub1lc…6lcye
2026-10-02 20:00:28 UTC
in reply to nevent1q…kw2t
Author Public Key
npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcyePublished at
2026-10-02 20:00:28 UTCEvent JSON
{
"id": "7654101ec57010a849f02304e3179b1f6761714cc282523845e40d92a25eb564",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1790971228,
"kind": 1,
"tags": [
[
"t",
"pitscaler"
],
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"2f6c0488415bbc19e60df4c0bbd74f921785d332b67fb1984fa0232fdf5aa1d7",
"",
"reply",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"proxy",
"https://cyberplace.social/@GossiTheDog/117373090409884785",
"web"
],
[
"e",
"23f22e25375736fdb37fe805511e7be087d26e5f2f9d2320672616893bad2bf1",
"",
"root",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"p",
"3507f6c32f8d7e3edbe5570ad3340a49a863d9b75fadd3622d6f6bc5372a2af3"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/117373090409884785",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/117373090409884785",
"pink.momostr"
],
[
"-"
]
],
"content": "Citrix have a blog out for #PitScaler 2\n\nIt’s a new security vuln, zero day. You can spam SAML requests and pitboss will execute commands again. \n\nhttps://community.citrix.com/techzone-blogs/110_security-updates/security-update-guidance-for-netscaler-saml-authentication-deployments/",
"sig": "8d05bd7dabf5325c19fa1d511aaa5ab5781f35fa041cdf8c01fa835054f13911b9c9456e3a7afd1d8601655d868f3830143a8166146cab5ea3395ba72753ceb1"
}