Customers can determine if they have an appliance configured as a SAML IDP Profile by inspecting their NetScaler Configuration for the specified string: add authentication samlIdPProfile .*
| Vendor | Product | Versions |
|---|---|---|
| Citrix | NetScaler ADC and NetScaler Gateway | 14.1 before 14.1-66.59, 13.1 before 13.1-62.23, 13.1-FIPS before 13.1-37.262, 13.1-NDcPP before 13.1-37.262, 13.1-62.23 or newer, 13.1-FIPS and 13.1-NDcPP 13.1.37.262 or newer |
Added detailed description on how to check for SAML IDP configuration and included a new CVE tag for CVE-2026-4368.
Updated vendor to Cloud Software Group, added new affected versions, changed severity to HIGH for CVE-2026-4368, and included new patch information.
Updated patch available information to include specific fixed version numbers for affected products.
Updated description with detailed technical information and changed severity from HIGH to CRITICAL.
Updated severity from NONE to HIGH, marked exploit as available, and noted that the vulnerability is actively exploited.
Updated vendor and product information, added critical severity and CVSS score of 9.3, and specified affected versions along with patch details.
Initial creation