Citrix has confirmed that two previously unpatched remote-code-execution flaws in NetScaler ADC and NetScaler Gateway are being actively exploited, and it shipped patches for both alongside six additional bugs. One of the two vulnerabilities hits every affected deployment by default, meaning admins running unpatched instances are exposed without any special configuration. The disclosure followed a report from security firm watchTowr just a day earlier, adding pressure on organizations to patch immediately.
// source: thehackernews.com ↗