Citrix Discloses Actively Exploited NetScaler ADC and Gateway Flaws

Citrix is warning of two vulnerabilities in its NetScaler Application Delivery Controller (ADC) and Gateway appliances that are being exploited in the wild.

The two flaws in Citrix’s network solution appliances include a high-severity denial-of-service bug (CVE-2023-6549) and a medium-severity remote code execution flaw (CVE-2023-6548). Citrix said it is aware of a "limited number of exploits" in the wild and urged impacted customers to apply updates.

“Exploits of these CVEs on unmitigated appliances have been observed,” according to Citrix’s security …

actively exploited adc application application delivery application delivery controller aware bug citrix code code execution controller cve delivery exploited flaw flaws gateway high medium netscaler netscaler adc network remote code remote code execution service severity solution vulnerabilities warning