Citrix patches NetScaler SAML zero-day exploited in attacks

Citrix released emergency updates for a NetScaler denial-of-service vulnerability tracked as CVE-2026-88779, exploited in zero-day attacks. Researchers are investigating whether the flaw can also enable remote code execution. The patch addresses active exploitation, with Citrix urging administrators to apply updates immediately to prevent further attacks.