CISA Issues Emergency Directive to Patch Actively Exploited Citrix NetScaler Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities. The emergency directive, issued over the weekend, mandates that federal agencies remediate the identified flaws by Wednesday. CISA indicated that the vulnerabilities are being actively exploited in the wild, posing risks of unauthorized access, data exfiltration, or full system compromise on affected federal networks. The directive applies to U.S. federal government systems running Citrix NetScaler appliances. While the specific CVE identifiers and exact patch details were not confirmed in the source report, the action underscores the severity of the actively exploited flaws and extends the risk to any organization using unpatched NetScaler appliances.