watchTowr pops pre-auth RCE in Citrix NetScaler via SAML heap overflow
watchTowr walks a heap overflow in Citrix NetScaler ADC/Gateway SAML parsing to unauthenticated RCE, tied to CVE-2026-8452. Reachable on builds before 13.1-63.18 and 14.1-72.61 when SAML is configured as SP or IdP. It's the first public NetScaler RCE writeup in three years, so patch now.