CISA pushes federal agencies to patch Citrix RCE within a week

CISA has ordered U.S. federal agencies to urgently remediate three recently patched zero-day vulnerabilities — including Citrix NetScaler CVE-2023-6548 (code injection/RCE) and CVE-2023-6549 (buffer overflow) — that are being actively exploited; Citrix urged immediate patching of Internet-exposed ADC/Gateway appliances or blocking external access as a temporary mitigation, and the flaws were added to CISA's Known Exploited Vulnerabilities Catalog.