October 3, 2026
NetScaler Round Two: Patched Appliances Crashing Again as a New SAML Bug Gets Reproduced
Citrix NetScaler SAML authentication flaws are causing crashes on patched appliances with indiscriminate spray-and-pray exploitation confirmed, while watchTowr Labs has reproduced the vulnerability. GitLab AI Gateway suffers a CVSS 9.9 unauthenticated remote code execution flaw affecting self-hosted deployments. Dell Container Storage Modules contain two CVSS 10.0 unauthenticated flaws exposing storage credentials and enabling unauthorized access across all supported storage families. Warlock ransomware, attributed to the China-nexus Longlegs group, is infiltrating critical infrastructure through SharePoint and using legitimate Microsoft Teams TURN servers for covert DragonForce backdoor command-and-control.