✅ php2shell is fixed – Citrix updated CTX697263 today: 14.1-73.49 · 13.1-64.32 · 14.1-73.49 FIPS · 13.1-37.286 FIPS/NDcPP. They also contain the CTX697096, CVE-2026-88779 and CVE-2026-107406 fixes, so one upgrade covers everything. • ICA/VPN sessions drop during the upgrade – plan a window • samlRejectUnsignedAssertion OFF is forced ON • Keep the management GUI restricted with ACLs (CTX228148), before and after Checker v1.18 is out: php2shell status by build, and on an unfixed build an open management GUI is now VULNERABLE (exit code 2 – heads-up if you run it from Console jobs or scripts). https://github.com/ThomasPoppelgaard/netscaler-ctx697096-checker Blog (one-build table, timeline, flowchart): https://www.poppelgaard.com/cve-2026-88771-through-cve-2026-88778-what-you-should-know-and-how-to-fix-your-netscaler-adc-netscaler-gateway#what-to-do

Sure about the ICA/VPN sessions being dropped? Just upgraded the first HA pair and just had the regular small 'network-hick-up'. So no reconnection needed.

your correct, also had this previous build, they said it would be the new way of patching but it jumps a build or two