NetScaler's SAML zero-day: What CVE-2026-88779 means for anyone running SAML

Citrix has patched an actively exploited memory overflow in the SAML handling of NetScaler ADC and Gateway. It is the fourth NetScaler SAML vulnerability this year, and the pattern says a lot about where authentication code breaks.