Citrix NetScaler Keeps Rebooting Following the 0-Day Patch

Citrix NetScaler customers are reporting repeated appliance reboots after installing build 14.1-73.37, the emergency update released for two zero-day flaws under active attack. The failures appear linked to crafted SAML authentication traffic that crashes the nsaaad service. Citrix says its engineering and support teams are tracking a newly seen SAML issue and plan to release a fresh security bulletin and fixed build. The key point is that the reboot reports do not yet prove attackers have bypassed the September patch. Build 14.1-73.37 remains Citrix’s fixed 14.1 release for CVE-2026-88771 and CVE-2026-88772. The first flaw lets an unauthenticated attacker run commands on any affected deployment, while the second can allow code...

Read the full article at the source.