This blogpost is made to help you understand CVE-2026-88771, CVE-2026-88772 and the six other vulnerabilities in Citrix security bulletin CTX697096, and CVE-2026-88779, the SAML attack, which Citrix published in a separate bulletin, CTX697174. It also explains how you can check if you are vulnerable, and gives community guidelines on how to fix your environment. This blogpost is not covering the details of the exploits out there, as I have no interest in sharing what the red team is doing. All responsibility is your own. I highly recommend you read the blogpost and take action immediately, don’t hesitate.

(Last updated 6th October 2026)