🚨 New critical SAML CVE tonight: CVE-2026-107406 (CTX697191, CVSS 9.5, SAML → RCE, no workaround) Heads-up for anyone who just patched to 73.41 / 64.28: if your NetScaler is a SAML IdP, you need to upgrade again to 14.1-73.46 / 13.1-64.29 (FIPS: 73.46 / 37.283). SAML SP only (e.g. Entra ID → Gateway) on 73.37–73.41 is not affected by this one. 🛠️ Checker v1.16 is out (GA): it checks CVE-2026-107406 against your build and SAML role, and points every upgrade to the one build that fixes all three bulletins. It also includes the v5v.in / 72.5.65.111 indicators from the thread here last night. Thanks for sharing 🙏 • Script: github.com/ThomasPoppelgaard/netscaler-ctx697096-checker • Release notes: github.com/ThomasPoppelgaard/netscaler-ctx697096-checker/…/1.16 📝 Blog updated with a flowchart and an “am I affected?” table: poppelgaard.com/cve-2026-88771-through-cve-2026-88778-what-you-should-know-and-how-to-fix-your-netscaler-adc-netscaler-gateway#… Feedback and (sanitised) output welcome!