Forged SAML traffic is crashing NetScaler appliances that just patched the zero-days
After the emergency fix for CVE-2026-88771 and CVE-2026-88772, NetScaler ADC and Gateway administrators report reboot loops caused by forged SAML traffic that crashes the nsaaad authentication service. Preserve logs before every restart and follow Citrix guidance — this is a separate issue, with no CVE published yet.