Citrix confirms two critical NetScaler zero-day RCE vulnerabilities are being exploited in attacks, says it has released security updates to fix the flaws (Lawrence Abrams/BleepingComputer)

Citrix has confirmed that two critical, actively exploited NetScaler zero-day remote code execution vulnerabilities put internet-facing ADC and Gateway deployments at immediate risk of compromise. For CIOs and IT leaders, this is a high-priority operational issue that can lead to unauthorized access, service disruption, and emergency response costs, making rapid patching, exposure assessment, and mitigation planning essential.