CISA urges urgent patching of two actively exploited Citrix NetScaler vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has added two Citrix NetScaler vulnerabilities to its Known Exploited Vulnerabilities catalog, and it has set the “due date” a week after they were added.

Federal Civilian Executive Branch (FCEB) agencies are handed specific deadlines for when vulnerabilities must be dealt with. Normally, the Directive requires those agencies to remediate internet-facing vulnerabilities on its catalog within 15 days, and all others within 25 days.

The Citrix NetScaler vulnerabilities need to be patched …

actively exploited agency catalog cisa citrix citrix netscaler civilian cybersecurity executive exploited exploited vulnerabilities fceb federal federal civilian infrastructure infrastructure security known exploited known exploited vulnerabilities known exploited vulnerabilities catalog netscaler patching security urgent vulnerabilities week