The two flaws are being actively exploited in the wild, which prompted CISA to invoke its emergency directive authority to compel rapid remediation across federal networks. Agencies are expected to verify whether their environments are affected and take immediate action to close the exposure window.

Key points from the directive:

• Affected product: Citrix NetScaler
• Two critical vulnerabilities, both under active exploitation
• Federal agencies must complete patching by Wednesday
• CISA issued the order over the weekend, underscoring the urgency

Administrators running Citrix NetScaler in any environment, not just federal agencies, should treat this as a priority. Given the active exploitation, delays in patching leave systems open to compromise.

Source: Publication Name

Are you running Citrix NetScaler in your environment, and if so, have you already applied the patches or are you still working through the remediation?