There’s yet another Citrix Netscaler vuln (new patch today) which allows unauth RCE - CVE-2026-107406

Same attack surface (SAML) as two of the other vulns exploited in the wild during the past month.