Update is live: CVE-2026-88779 (CTX697174, separate bulletin, not part of CTX697096). SAML on your NetScaler? Upgrade again to 14.1-73.41 / 13.1-64.28, even if you're already on 73.37 / 64.24. Checker v1.12 now flags this on every run, plus SAML policy coverage per vserver and 98 IPs / 34 hashes. Blog: poppelgaard.com/cve-2026-88771-through-cve-2026-88778-what-you-should-know-and-how-to-fix-your-netscaler-adc-netscaler-gateway GitHub: github.com/ThomasPoppelgaard/netscaler-ctx697096-checker Release notes v1.12: github.com/ThomasPoppelgaard/netscaler-ctx697096-checker/…/1.12

Great job once again Thomas, thank you! One thing we noticed, was that some environments report [SUSPECT] even if they were running 14.1-73.37 at that time, if they were updated to 14.1-73.41 later. I'd say that below 14.1-73.37 or 13.1-64.24 should be flagged and at least a remark that the appliance was running the first patched version when the query hit it would be helpful, if it's doable. Just causing some extra checks and worries in the customer as of now. The version history could be scanned easily from under /nsconfig from the archived ns.conf files and their time stamps?