Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Security firm watchTowr has reported that two new, unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances, allowing remote code execution, are being actively exploited. Citrix has not yet confirmed the flaws or released a fix, leading some administrators to take affected appliances offline.