CVE-2026-88779: Why Patched Citrix NetScaler Appliances Still Got Hit

CVE-2026-88779 is an actively exploited Citrix NetScaler SAML zero-day that let attackers compromise appliances even after administrators applied earlier patches, prompting emergency fixes, CISA KEV action, and post-patch reboots to knock SAML deployments offline.