We also set aside some space on community for discussion/feedback: https://community.citrix.com/forums/topic/258854-netscaler-security-bulletin-for-cve-2026-3055-cve-2026-4368/

Hello. Per Anders' previous comment and the blog article, it sounds like 13.1 is not affected by CVE 2026-4368. Can anyone confirm this? We are only running v13.1 and we are not configured as a SAML idP, so it seems that we should not be vulnerable to either CVE.

This referenced in t CTX article:

TS is correct, that vulnerability only impacts that very specific version.