Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two previously undisclosed zero-day vulnerabilities in Citrix NetScaler appliances have been found to be under active exploitation, allowing remote code execution. These vulnerabilities affect Citrix NetScaler ADC and NetScaler Gateway appliances. Security firm watchTowr disclosed the issue, stating that the vulnerabilities are being exploited in the wild. Citrix has not yet confirmed the existence of these flaws or released a patch to address them. As a result, some administrators have opted to take their appliances offline while waiting for a fix. The vulnerabilities pose a significant risk to affected systems.