CISA orders feds to patch exploited Citrix flaws by Wednesday

CISA has issued an emergency directive ordering U.S. federal agencies to patch two critical vulnerabilities in Citrix NetScaler products. The directive was issued over the weekend, requiring agencies to secure their systems by Wednesday. The vulnerabilities are being actively exploited in the wild, prompting the urgent response from CISA. Citrix NetScaler is widely used across government and enterprise environments for networking and application delivery. The order reflects CISA's authority under Binding Operational Directive 22-01 to compel federal civilian agencies to remediate known exploited vulnerabilities. Failure to patch these flaws could expose government systems to significant compromise. The tight deadline underscores the severity and active exploitation status of these vulnerabilities.