🚨 Citrix Warns of New NetScaler SAML Authentication Security Issue
Citrix is investigating a newly observed security issue affecting customer-managed NetScaler deployments using SAML authentication with Gateway or AAA functionality.
According to Citrix, the issue is configuration dependent and may affect appliances containing either of the following SAML configuration patterns:
add authentication samlAction.*
add authentication samlIdPProfile.*
Citrix says customers should review their NetScaler Gateway and AAA configurations for these SAML authentication actions and contact Citrix Support if they are currently experiencing impacts related to the issue.
A new security bulletin and updated NetScaler builds are planned. Citrix says affected appliances should be upgraded as soon as the fixed versions become available.
The company confirmed that this issue is separate from the vulnerabilities recently disclosed under CTX697096.
No CVE or definitive list of affected and fixed versions has been published for the new issue at this time.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Source: https://community.citrix.com/techzone-blogs/110_security-updates/security-update-guidance-for-netscaler-saml-authentication-deployments/
Dark Web Informer :verified_paw:
npub1xc…thx5s
2026-10-02 19:50:22 UTC
Author Public Key
npub1xcpw8fqmxj2xmqwqql70ttsd4t39n9a5up93ql5zu44qjrqdnwqsfthx5sSeen on
wss://relay.ditto.pubPublished at
2026-10-02 19:50:22 UTCEvent JSON
{
"id": "d7844cc2aaf5486ce0614cdea98e1f8a3795573f3752586b40f6d7e8dde0ab32",
"pubkey": "3602e3a41b34946d81c007fcf5ae0daae25997b4e04b107e82e56a090c0d9b81",
"created_at": 1790970622,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/DarkWebInformer/statuses/117373050697117044",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "🚨 Citrix Warns of New NetScaler SAML Authentication Security Issue\n\nCitrix is investigating a newly observed security issue affecting customer-managed NetScaler deployments using SAML authentication with Gateway or AAA functionality.\n\nAccording to Citrix, the issue is configuration dependent and may affect appliances containing either of the following SAML configuration patterns:\n\nadd authentication samlAction.*\nadd authentication samlIdPProfile.*\n\nCitrix says customers should review their NetScaler Gateway and AAA configurations for these SAML authentication actions and contact Citrix Support if they are currently experiencing impacts related to the issue.\n\nA new security bulletin and updated NetScaler builds are planned. Citrix says affected appliances should be upgraded as soon as the fixed versions become available.\n\nThe company confirmed that this issue is separate from the vulnerabilities recently disclosed under CTX697096.\n\nNo CVE or definitive list of affected and fixed versions has been published for the new issue at this time.\n\n💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing\n\nSource: https://community.citrix.com/techzone-blogs/110_security-updates/security-update-guidance-for-netscaler-saml-authentication-deployments/",
"sig": "9f81c65693f841ab21eaf5296735daca051644c1cfebd241e8064c05aef3ade81799339589c6bc90458191e920cf2f6be032a762bc5a9fdfca702f977c56bb84"
}