There’s yet another Citrix Netscaler vuln (new patch today) which allows unauth RCE - CVE-2026-107406
Same attack surface (SAML) as two of the other vulns exploited in the wild during the past month.
Kevin Beaumont
npub1lc…6lcye
2026-10-08 22:07:42 UTC
Author Public Key
npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcyePublished at
2026-10-08 22:07:42 UTCEvent JSON
{
"id": "04239320eb683baaa31987c614e212551c9a8ae297732d527eaa17eb2e1fd74d",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1791497262,
"kind": 1,
"tags": [
[
"proxy",
"https://cyberplace.social/@GossiTheDog/117407564606000783",
"web"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/117407564606000783",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/117407564606000783",
"pink.momostr"
],
[
"-"
]
],
"content": "There’s yet another Citrix Netscaler vuln (new patch today) which allows unauth RCE - CVE-2026-107406 \n\nSame attack surface (SAML) as two of the other vulns exploited in the wild during the past month.",
"sig": "47f84268cd032e76c4a3fe0009507de572901b846dca4891caa9d9dabd2b9875058214093f0d2d06ebeba8d71888ab656ee3a0376b33fe74780e5980d7beb2ab"
}