Organizations using Citrix NetScaler ADC and Gateway appliances have been urged to immediately apply updates addressing two zero-day flaws, which have been leveraged in ongoing attacks, BleepingComputer reports. More than 1,500 NetScaler management interfaces were discovered by Shadowserver to be vulnerable to attacks involving both flaws, the first of which, tracked as CVE-2023-6548, could be exploited to facilitate remote code execution attacks provided that threat actors have low-privilege account privileges, as well as NSIP, SNIP, or CLIP access.

Source: SC Magazine