Plan
active
Citrix warns of two NetScaler Gateway and ADC vulnerabilities
- Engineer — Plan: NetScaler Gateway and ADC are widely deployed edge appliances with a strong exploitation history; apply Citrix’s patches within your next maintenance window and verify no unpatched instances are internet-facing. No KEV listing or public PoC present to justify emergency patching, but Citrix’s urgency language warrants prioritizing this over routine patching cycles.
- SOC/IR — Learn: No active exploitation, IOCs, or TTPs reported yet; file this as context in case exploitation emerges, given NetScaler’s track record as a high-value target. Monitor threat intel feeds for follow-on exploitation reports before building detections.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.