CISA Adds 2 NetScaler Flaws to KEV as Researchers Detail Root-Level Exploit. Attackers exploited two critical Citrix NetScaler flaws before fixes were available, including a bug that lets hackers with no credentials run commands on appliances left in their factory settings. CISA added both to its KEV catalog and gave federal agencies days to patch and check for compromise.
First seen on govinfosecurity.com
Jump to article: www.govinfosecurity.com/hackers-hit-netscaler-zero-days-before-citrix-patched-a-32959
