Has anyone heard any rumors of a new netscaler CVE? Possibly related to SAML? I'm not trying to start one, but someone mentioned something to me and I've seen nothing here or on the internets.

Same here. Should drop today. Let's see…

Nothing confirmed or sharable yet but seems that build 14.1-66.54 could have been pulled of download site....

selecting firmware under "narrow results", all 14.1 releases are not appearing:

14.1-60.57 and older are accesible under "earlier versions"

ah, thanks

rumor says, it was supposed to be out today, but got postponed

The rumour mill hard at work, haha. Well, let's see what happens.. it's been a while anyway.

Is it just from the STA and portal theme WAF issue? Or is there a security flaw I need to prep people for.

Nothing official yet, but the fact that we're still unable to download the latest versions since yesterday seems kind of sketchy, barring SDX.

I do see this in my logs. Maybe something to look into. "Path traversal detected |/logon/LogonPoint/../vpns/cfg/smb.con

Crossposting here, too. Build 14.1-66.59 and later builds address the security vulnerabilities described in CTX696300. This build replaces 14.1-66.54.

Its online now

ditto