Citrix confirms two critical NetScaler zero-day RCE vulnerabilities are being exploited in attacks, says it has released security updates to fix the flaws (Lawrence Abrams/BleepingComputer)

Citrix confirmed that two critical NetScaler zero-day remote-code-execution vulnerabilities are actively exploited in attacks. The company has released security updates to patch the flaws. The updates address the vulnerabilities that allow attackers to execute arbitrary code on affected NetScaler appliances.