I was talking about one of the previous ones (CVE-2026-88771, since it's easier to emulate than CVE-2026-88772). The Watchtowr article I was referring to is this one:
https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/