Two unpatched NetScaler flaws reportedly exploited in attacks

Security firm watchTowr says attackers have exploited two previously undisclosed flaws that could allow remote code execution on Citrix NetScaler appliances. The firm said it identified the flaws during forensic investigations and expects Citrix communications and fixes early next week. Citrix had not issued an advisory for the reported flaws when the article was written. Without affected build numbers or technical details, administrators cannot determine from this report alone which appliances are vulnerable. Some organizations have reportedly shut down internet-exposed NetScaler systems, potentially interrupting VPN access and application delivery.