CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

The US Cybersecurity and Infrastructure Security Agency has added two critical Citrix NetScaler ADC and Gateway vulnerabilities to its list of known exploited vulnerabilities. These flaws are being actively exploited by attackers globally. One of the vulnerabilities is an improper input validation issue that could allow an unauthenticated attacker to gain access. This particular vulnerability has a high CVSS score of 9.5, indicating a significant level of severity. The agency's move to add these vulnerabilities to its catalog suggests that they are being targeted in ongoing attacks.