CISA Warns of Citrix RCE and Privilege Escalation Vulnerabilities Exploited in Attacks

CISA added three actively exploited CVEs to its KEV catalog: two Citrix Session Recording vulnerabilities enabling limited remote code execution or privilege escalation to NetworkService (requiring authenticated/intranet access), and a Git configuration-quoting/symlink vulnerability allowing arbitrary code execution; CISA urges immediate patching and federal agencies must remediate under BOD 22-01.